last executing test programs: 22m21.906643025s ago: executing program 2 (id=1546): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe68d}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x52, &(0x7f0000000100)=""/82, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xb, 0x8, 0x1000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000240)=[{0x1, 0x4, 0x10, 0x4}], 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r0, 0x0, 0x0, 0xb2, &(0x7f0000000340), &(0x7f0000000400)=""/178, 0x5, 0x0, 0x1000, 0xaa, &(0x7f00000004c0)="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", &(0x7f00000014c0)="5a7dc63a79e3cc39011607aa07003af4e0af082e2a1f6a416123e142c63b7a7696834abe2b9aa893bcd6ce1c7fb51d1d62467868f27952deea0884e33b4de6b2db161ea6a647c9579a404556b6d3943c29b549a87777ad0edaed2a7aa539179f5896deec17ac476b26d80d0ef8406af5c68e19196275f492255e16bfe9bc9c33f3164a18f56d155fca50f50c66cae91a9e474e3a1647ee80fc29a1926a3e022552b3be500ee233c95cf3", 0x0, 0x0, 0x1d}, 0x50) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000002f80)={&(0x7f0000001600)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001680)="d778ef0de110a76cd352019df85c317bbb491ef394ff49df25b7f4fea8dfd679f5dd790357", 0x25}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="b089b3636ba7d98e27051e077729c54e28b947d6f6473bceae12b7ffe7574d3ce179ec05bed41c31ec1d9228d28fc4b3f11b1e3c638003a9646f5988fa260ea40ed8c836c4c2757bdb194169810859ae968c782406f5c397365215f5721b62fc077748e0b505397255e55c8eaa31febb87f873641ac06d730e70d11eb946cbcc4c1bda0f828b1fe41cb910a66a7b", 0x8e}, {&(0x7f00000017c0)="902c1761b78d2d4fcf27e9bcfbb7630b7d49ea97f176efd686fc2d066b29d155dad7d5798d397abbc183d5287bd38db7c203e155522d026aaa26a4d5af1bc44d776081ea5883cd5624787e6d57a847eea783bee928c1da0456aa7ff2da7b66f8dc008e38e1a36431dc23fa2906afca244eb08d255b29b2d7eedddc49899ce1439d5dd56b4e399b1e8c1c5b22199dbe18b23d664a9a09ed3b810e4976d190c569b8af9f57f39619769ac34b1c7a246e", 0xaf}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="8d1e22b9ac26d351cfa982993f8f536d789fc9714befd39e6e5e46b88dbcb0124f15edae24f5790ddaaa96c3ccfefec366345f2bb78f1ce0954c4e117bf7477d2b0fc7d7", 0x44}, {&(0x7f0000002900)="feadbff5d51e71e48faa15019ae5926d7c19ea90e6dbf3ac78453c68cea9ae6f6483713ee2c4dd14751f952f781ab782190845195223386f0ecd7d6bf7076de54ead4035106d638d0a9d06c8bb1eeb7842e4bcca383c8f", 0x57}, {&(0x7f0000002980)="cadd9d19002a08c20e5f5ce4bbb680a6b8cd0683703d49707a18fecb98d17fbca83c385b7fdd2666aea0e2827f2292a8139c7860d2c010554cfcb29f823ec1c8f99f6810fe872a90467c01d035a62e3882c32fb499576b3ff66b637bfa5e219394eee45f7b15f00270959750fdce5ca87aa1587228224d2bf4b227182ebf9cd3d02dbb5ea5c5d9e89d4024f2d0b48b15d4e3a26dc226cfed1c0401f7e4131831101c2d2b98404301fede9a21cd44a47a59966542166d0d9381d7dd13255d7e6bbfc54dfb64624248bb935689e56deb5437847e56", 0xd4}, {&(0x7f0000002a80)}], 0x9, &(0x7f0000002b80)=[{0x48, 0x100, 0x0, "0120e8593fa8c824dacadd82eeeaa6e6c1f1123b745213203eb3b2f608fe35fe7559a3cd04bb294cacd2c0bf8a267430b0a905b58620"}, {0x88, 0x103, 0x35b783a7, "6b55387c71f2f8ac13cc707e2611044ca43129e17d6b5b597d7f3df866c99f9176ca98e54204a625623afbb74e9cb2991cace826e7cfd1afb695d5dc0323b40e53331aa6d48de6bebadf1fb57bb2442fb8976e0954b55ada7ed99428c57cf212d2c39c12438c15683cb7161a166c6693d61e3531103dcf"}, {0xa0, 0x112, 0x2, "3304f80af9612008f1be0a27ab9901a34833466bd8e6ae6b0a83e56b974b03a347f0ad6c40d1eb8a51fe9bec1b711e522eb5b6d9f3d2ce2423223f00e12f411d8ee46e49bfe384084d6e623dfc4881bf2b20207be6ec323a8a66104514c5b77aae37ae56d1da7361164b5037e657fc3ffc11d6ac38cae347d5f74a5b6de552feb14a8231751166c24c8552"}, {0x10, 0x1, 0x80000000}, {0x38, 0x118, 0x1, "693d33442c0366a64bf08fb503a9eb6ee2b365f1c7c50d91e5e5536c9b9f353ddc4ad768"}, {0xd0, 0x3a, 0x5, "184b2d9488cb0221861545d3edaf2a285f3ab1bf5e3d890cf933fdb9c2392d2bd17da059f0748fbc7b73c6a2d60dd03fe2d85aa58d23b02bb05cdb2bad075db0391e48044f401aaab55e1e378634fb3ff3040056282eb98cce62fd3d2f36eaab58c8f0d7a10465b7d7c24c1276ec47fc09dd631e2cc375a6605bfb57d71b6dad15eff3507ff52995791eb3f1ed63d713e306d44fdeefdfe7575c86619460e966984c76775199f149f2fab735387f52683c531af91e6e2f7194"}, {0xb0, 0x108, 0xf, "1be7d6f51854c1195331a7fa2c90119d8fe8b8dae5de49af4fcd33c06165b93fc14ae5d71a001af92837b9733a2a557e55f257fc1c97c596da6911ba4624b5dc0f8448fcbcd83567e678b3452eb36a4b9fe5198deda91bf122e03b662f3e8260edb0aa1e332bbaba0420d69fa1c5c131395413b662ae1543accc8236a151b84973cca849af2be90401dc9270c013922f93b30a920adf0e9d61"}], 0x338}, 0x40005) 22m21.50354615s ago: executing program 2 (id=1547): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4040) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) unshare(0x2c020400) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x5) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x0, 0x4}, 'port1\x00', 0xf6, 0x0, 0x100, 0xfffffff8, 0xe, 0x0, 0xffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 22m19.811544973s ago: executing program 2 (id=1549): mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000006800010002000000fcff27ecb0c70000000000001c000200"], 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000257a00f893b0e0e1ccc78a66beefdb7700"/33, @ANYRES32=0x0, @ANYBLOB="2be8000090000000300012800b00010067656e65766500002000028005000c00000000000400060005000900010000000500040078000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8040) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044010) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)=0x6e) r8 = fanotify_init(0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r8, 0x455, 0x8000008, r9, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r10, &(0x7f00000040c0)={0x2020}, 0x2020) bind$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 22m18.691710293s ago: executing program 2 (id=1553): openat$kvm(0xffffffffffffff9c, 0x0, 0x12601, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) sendmsg$NFC_CMD_GET_DEVICE(r5, 0x0, 0x20040014) r6 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86a7d62fdce0b68c2a7502b5b00c9f", "faef725a066e767106fa1a96391039d1"}, 0xe, 0x5}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000180)={0x8, 0x1, 0x3, 0x41, 0x4}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b80)={0x0, 0x11, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000fddbdf250100010008000100030004000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) (fail_nth: 2) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x3, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 22m17.383880484s ago: executing program 2 (id=1555): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0xa4, 0xffb, 0x7, 0x10b6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x1ff, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0xa, 0x100002, 0x8, 0x752, 0x10000000, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x85, 0xb, 0x6, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0xffffffff, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x80, 0xd5, 0x3, 0x401, 0x66cd, 0x4, 0x8, 0x3, 0x1fc, 0x1ff, 0xffffffff]}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000058010000580000000a0000000a00000000000002000000000000000000000003000000000500000002000000ffffffff0200000000000009030000000d000000000000120100000007000000000000010000005e0058030100000000000012050000000061006161002e006100"], &(0x7f0000000dc0)=""/4096, 0x7a, 0x1000, 0x0, 0x3, 0x10000, @value=r2}, 0x28) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000080)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x1, 0x53b3, 0xfffffffd, 0x8, 0x4, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x24, r4, 0x1, 0x400a00, 0xa000000, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) 22m15.088667336s ago: executing program 2 (id=1563): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x3, 0x200) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xa3d7, &(0x7f0000000340), 0x0, 0x0, 0x1, {0x2}}) connect$ax25(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="09000000010000", 0x7) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="e2f5", 0x2, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') fsetxattr$system_posix_acl(r7, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r5, r6}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="f7cb5fcb147121f2f7367410dd3c6bc3b2011f910def704d8fc26d2a81d1f0f2aa8a96001c0472e1ee66512fca36bcf346ae3732cb608628acd4a55e12e1bdf1a4ae59650f4757cd1b3100ccfcab76c32cc64d552e7f9ed5a271649e0b33d6ccf046ec6397e0972636b25ec18ccc5155ac7a219d3e25b352d5220b201b8607c192eb3199689abfbe49b543004e8d01149f154bf92390e85e8ba71610ac6c18074a", 0xa1, r6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x2803, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9070300000f3236672e0fc77c03c4e31d1868046e0f01d166ba4000ecf30f09c4c2910a4100c74424008000c0fec74424022640c7d9c7442406000000000f011424c7442400ba3f0000c7442402faffffffc7442406000000000f011c2466b870008ed0", 0x64}], 0x1, 0x8, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xedb0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, 0x0, 0x0}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x845, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c2, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x80, 0x3, 0xfffe, 0x8, 0x4000000000008d], 0xfffdafff, 0x80}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 21m58.242254642s ago: executing program 32 (id=1563): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x3, 0x200) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xa3d7, &(0x7f0000000340), 0x0, 0x0, 0x1, {0x2}}) connect$ax25(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="09000000010000", 0x7) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="e2f5", 0x2, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') fsetxattr$system_posix_acl(r7, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={0x0, r5, r6}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="f7cb5fcb147121f2f7367410dd3c6bc3b2011f910def704d8fc26d2a81d1f0f2aa8a96001c0472e1ee66512fca36bcf346ae3732cb608628acd4a55e12e1bdf1a4ae59650f4757cd1b3100ccfcab76c32cc64d552e7f9ed5a271649e0b33d6ccf046ec6397e0972636b25ec18ccc5155ac7a219d3e25b352d5220b201b8607c192eb3199689abfbe49b543004e8d01149f154bf92390e85e8ba71610ac6c18074a", 0xa1, r6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x2803, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9070300000f3236672e0fc77c03c4e31d1868046e0f01d166ba4000ecf30f09c4c2910a4100c74424008000c0fec74424022640c7d9c7442406000000000f011424c7442400ba3f0000c7442402faffffffc7442406000000000f011c2466b870008ed0", 0x64}], 0x1, 0x8, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xedb0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, 0x0, 0x0}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x845, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c2, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x80, 0x3, 0xfffe, 0x8, 0x4000000000008d], 0xfffdafff, 0x80}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 4m56.375729099s ago: executing program 3 (id=4783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x2e}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00000000", 0x2c}, {&(0x7f0000002680)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355ea32dfc72e59254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c16231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a344849e5b58a7038979d2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9890ab4dff68bf2928b5fc711bae0f1baeb8596e8a42f7f172125fb1da929d1f921c53f6cba0d98cd6e31b41ebf3935981b9e98524dd344b9e76b66d31f7d47869cdd3ae49e4e8c42264be751219861504ad49ab00e384e7bbf06472714829dd61e58a1784696a02eee6d9c92446392cadf4436c7eb769d1c5226164a9be70d2c2c6b71342a6d03dc0d39d224f9df8e4ed11c86a47531d5449e5364e8ca5af4c03455fa9da8b5b0d174e41bace68e515f9967d79eaaac20b2a9e773b3418ff1a10c1835bed07e6109eac8ea4f130bc70aad103356f9749195fc2745f7076b5b165ff56de0596018b8251a0bd700db48a2243fe56831cf6785d70ded595b1bf9b25f2979923176109adb8012ae650c3fcb110352b884f79aeb465817124f75cda3168ec65cdace89522c0a7061629ea0d5d0573b9aa029500d64cb5df4f440859e4944047e6967511f0f25e9a45751d296ed6b61d4f217c28672d34696fcbaad5a57fd0e063537e889df2bf9e20e6c075296a800179a23e605948dc74fcf0c4ea958884d", 0xc9a}, {&(0x7f00000009c0)="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", 0x137}, {&(0x7f0000000980)="281a9d23fdff", 0x6}, {&(0x7f0000000680)="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", 0x1f8}], 0x5}, 0x4005) 4m54.687827863s ago: executing program 3 (id=4790): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x8801) openat$null(0xffffffffffffff9c, 0x0, 0x200100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc820) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="2a0000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') r7 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xdb8c, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r10, 0xc008561c, &(0x7f00000001c0)={0x980901, 0xfffffff2, @value=0x9}) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x28, 0x6000, @fd, 0x5, 0x0, 0x0, 0x21}) io_uring_enter(r7, 0x567, 0x1000a387, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001680)=0x7) 4m53.069944578s ago: executing program 3 (id=4793): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)={[], [{@smackfsdef={'smackfsdef', 0x3d, '$@-%'}}, {@measure}]}) 4m52.864974645s ago: executing program 3 (id=4795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) 4m52.552630038s ago: executing program 3 (id=4796): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x8040) 4m51.868577403s ago: executing program 0 (id=4797): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9}) 4m51.751229501s ago: executing program 3 (id=4799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x2e}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00000000", 0x2c}, {&(0x7f0000002680)="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", 0xc9a}, {&(0x7f00000009c0)="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", 0x137}, {&(0x7f0000000980)="281a9d23fdff", 0x6}, {&(0x7f0000000680)="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", 0x1f8}], 0x5}, 0x4005) 4m51.587311118s ago: executing program 0 (id=4800): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x1, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x6) 4m50.865996989s ago: executing program 0 (id=4801): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x10, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 4m50.642557107s ago: executing program 0 (id=4803): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2fad8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4m50.149405123s ago: executing program 4 (id=4804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) 4m50.077161674s ago: executing program 0 (id=4805): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) 4m49.870264454s ago: executing program 0 (id=4806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 4m49.789150658s ago: executing program 4 (id=4807): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', 0x0, 0x0) 4m49.648480065s ago: executing program 4 (id=4808): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x8040) 4m49.439817451s ago: executing program 4 (id=4809): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9}) 4m49.32422411s ago: executing program 4 (id=4810): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x1, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x6) 4m49.124373887s ago: executing program 4 (id=4811): syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 4m35.445850827s ago: executing program 33 (id=4799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x2e}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f00000000", 0x2c}, {&(0x7f0000002680)="76e69c0141b4626c18e58316fb1785bc79a094726e33891c6d73f43317b7de3105b7a250790f8a23088b7292aad0049477fd7b736036a2ba810a11b6e5e83b06e0c428d362a29030f3fbb8f93a957f85472c59a37fbc2dc4abf47a23fe1bbab86b3666155606864b97f7615a55989cd2e143f1a9aca24050db9efff1f1639b55a2a771ec9e91f94fb670c3f35f31c40170189010e598500aa376763444ecaf5df2a31e04eda4201194c49c48d817c9d8d50d47c014b329be33b127527fe321b097a15f48ef82a32b10e24a1b56e981b91257aeddd7fee2fe035a1a164b3906ca184ad08f294cde3dfa48743847cac62a87c2d96176a9f6b4278dc95c6c637294986fa9e3e82b504341f82bf314389b0af7c8e07cb6f5ef9bcd83993c880ef2b2aa313a124bee3deb3133338c291d698f04b796be5514c81bad54c22190acda8145b1c14c4b916e2f5c2f10a8702b90d26e0332605edbc351edcd5621cf8c0f1585b1a53879f9ad931c18b15426856dc1c800e4cce36c6c1bf880c0c40a718810ff4793eba9e39d7cd9b351905a845dd3064613cd6f75802a6bc51c1524b412a2a68e6fa4886bd13b48aa9a12a7ace6fa08ccc86cda842d2f4b564a76a9e8adad2249e0dc200a2e647d34ef0dc23dd85674cce8f8e08a6c5ea76db48ac832f2a6e7514c9ab9f7e99fb3a7ec6cbc1ab45e12d151176cd6a044572928dfd2b72e3557d037b12328f7d4388a4ff8a8e890b2cdaa61fd525dfd3d0feda9c066feff70d89e8fbaaa4ac79e0b814c7b0cb9de9b5915ee30c12c55dc302fa36f96a6b4a437e2f7bac25fb284eec70388c1d4ee9fb51483c801007a74c1806141802eb107b80a047315c048db3671e35139544988b51a23136b02151a06114cc80c05b772786a505edc6d8f74a66b126a940f06000d7abbf3224b9e1f86eb693778968b3e982f197570ffa5732524be57aba33a59cf0032ef61b52f7c2fc2cd992d616452316ee21e7361cfc527acb09f0f46bb8ef013f28d7f615b09037d26e0715d927afee6b9878adad923ce6a6114bb8d3463be786232330a028c152adb31596c77a60231d53fbb8ce73509f37100f69c9004429e904b644de72b865fdccedbc99927542df25180f5880d20590900a9e8b711c8867b67b98d48caf8259797b41284f6e52aa5177ca06a4f25a568ea3a5dd13c6711436d63b814da12b72470eb3468860e5ef86bf381babc6cec73757a1c38a8cf9887bb69045b155ed0ae6c5f2c07f3b9f02c6f02a9ee474e3a9d75e67694bb2a0f28a672a5883dc9688ca2166f914bb1cfc70685907bfa4e9693d9620969fa41ca907751335193417b468de3bab8bf0b7438abe80f494c95e017f41e9a232c52153bc58adf7cc845e770ba119756bad683ff9c701cdd34bc540d8164cf3099c011b328fc0a0445e8eb8085c8cd2fdaf22e1dea9d04454b37af3c83dd3f667f73ca9eb0c3e9bc328b536a1ae9a449b24e227bb05692b16560756d9f0cb3200df43c26d3dbed542f7bd4e3d1329c8e9f631520355ea32dfc72e59254b1687197c8374111ee1de4c1784d843aa26992280c9ec267965b8d4d6461afcd597ce636316f5c4ac8f1bec9aa16acd974798c10475e53310630a36796ab4bba263ec76008a821ee9b58861e77f1aa341b9a1bcc9e21c9eb0625297604cdf14e77040e46603597f87d00053c7aafd8130813102105463ea538990f880525cd80e12c426eda2f87a4aefe29505de1a924fad50d9b97a37418331a542333585105ca18976435917721e80f3c631f268b8517f00dc9c8da872328a27e296aa7422b290327feda241d7ea0cd81750d044969e4429197ee55e8111193aee3df3bf37961a4323ac640b0fb11b19cb4e28756defd9f2e1ef3adc3b0aeb5102399dde99e5e67ff4d18c6475440612f42274d17ebc0280f73c89e77fd9dd652edb5ea4e7ad7326dd4c69cea26b47d8314ad412f8b96f2a33a6323c1dc4050ffde22b31656c22b8a5597c3c50cbf4efa9c8d2e4200ccab35ad8badc09d8e05a7abc3dfdce491ecd682dde18f2da41bff3c2e293ddc82df8a1ca558a08b7937bd7228ed25522f41bcdfba8c01a7aa93af6e58b3912dace81ffc5f079e8a4e9d45778afa57909a8e9138abbf4ae6bdbc571d8cc0fb68755b644934fc98fdb263098afab3ffed8e80ea4e935852d9577935c0a5b03425e5e1c3327213d0068dea19165602000000076fe3ad291b73f08e5bf3cb50f60510b85f09bec5dd2118eee65909ef08bbad2e38ef2fa7d6c0bbb2fbf90e1a63b26c8e41f17b35b1e55885ac66f263d0f42a27a7823d664e3ae65909dd411f05371f21e5bbf7424d41b966e2e8891ae13c3fb700987789f79cca95807ab3068549f250caee6ab7f924afec4b6c821f82f3683d42fde5ccbfafba73c720f8481a7e4d2315e2219f4925893268649dddf696586916bb8c02a3697c38016788d4c799cbbc52043d0ebd08d74efb4619a46db86c744928a580f53ae2d5bbbc69342f722ab65b305975ab500ce7335ceb7d0f726c83a2c47eccf416fdb79f8439d2c608019ea2ef94d1fe8a7367013ae57330165228509d62fab87f04b73a76f80049f23d11a3068721414f8e45b18f4c1d56c11da71c949b35e6c5305452057f947520abbaf701c9b7cbfe623adc65a050458cb5948d1c1699b452b3d9fbba6b3bcdb537bbbf95d8267760cd943de819349966dc515babfca73d5ff3551bc56fe0f9dedb6dd5f4463a3aa652dab81a589ca4e4b0f19ee3b4b20c3986df2f72ba990b421c77b00a9b5cca5d850d607d0a46c2f1b1bbf8dc7f0cc6fea3104615a6cd698d89fca37adf4edfe4ba7c16231a9f2a89c55612e9c7031b7d56d2eb88745ba43a63a122d4d6661e83408a807f9b4519c05f01383811e9a2506c0c23618528599152f7a0481d1e576e4eba29c7725f24f649be7e5d7b9678a91e22d559ee77a1ddfe7225afa40085061c492fc4714f90e481cf494ec6d108fe0be6633d4f4785cb1c82f15190333398283ade4cb97f8104a195098a5a1c90227797fa8216d4762b6e78c60030e69f413cccf052df64a3d1bda69f6dbff49a68ef298809390f39a91e3b5b1971dac8554ed9ae24b4789ba60c145c059b1cfbf6594ed3c734bb4e1172f2e31a18659764bf324621d68b8e356ac3faee71ea97b0b78eeaa29c0f7ee1129777ef1ecd4d7f6586f8d0308709a94489951a04d7eba9793af6c929a0e91cda90457ca1c128cb6aa23f6da8f64f0d78a59f07a19515d9f607aa79c7b6c466e474e45ad85b0f2b82d470c03f7bbfb2fa68b32d4ac188d4a64f22b29c3af9f0b39bc2bb6b399e50f71968effe5b2f0d51489aca30993a67dbd80698f9a0c2ba9addffa3c3712215e63f424ebb5ebaf24fbf476f1d85493050c8be181f7f8783a344849e5b58a7038979d2dff546eac853be1529fbe865a3f97643e8522956e0e361ac278e014328aea0b8d4268fd157513bd0f64f589ff8aaa0df2eb929984661031626bc661a5d3035b373177a4703a5000ef9b3ccb84b3dbaecb25ca341c5f12959d214e84b6545f47704d635765b336e4374975c2c40d5814b68b02965e517197edb553e7d3d8432544f66ce84990e7873fa2fadfaaeaa9915f907b3396b8529b03b646cf29be65784b5c08aa77521dd5064669f5ab33cc8ea168ea80949af9ee3937b2aa54250bd733c51c7c4be47c5848abf86b6f522e2a2dd4aa39693af731d70314e1d7af25c57a2dd126121bcd316118c66c18e2109a0c87714f00deaef07648e75f498eb7a8f30784376d14121a1ff34d402c5255fd2c0569624e93a796eb92980ee82ed283bb538e20dd8b02db072f897004f0e11de081cab5bedd9438c612982f1c73388ed98ae3b2d3adc6b8e70434c8992f52ab7c9488da5b67c6c003fdf530ef4172e0ccc16ff75fe6c919619c7ae513a8fcdfdb01410df94978f88b44e60b17a1984a600e04bd072fa731e19f75034d78b57f9890ab4dff68bf2928b5fc711bae0f1baeb8596e8a42f7f172125fb1da929d1f921c53f6cba0d98cd6e31b41ebf3935981b9e98524dd344b9e76b66d31f7d47869cdd3ae49e4e8c42264be751219861504ad49ab00e384e7bbf06472714829dd61e58a1784696a02eee6d9c92446392cadf4436c7eb769d1c5226164a9be70d2c2c6b71342a6d03dc0d39d224f9df8e4ed11c86a47531d5449e5364e8ca5af4c03455fa9da8b5b0d174e41bace68e515f9967d79eaaac20b2a9e773b3418ff1a10c1835bed07e6109eac8ea4f130bc70aad103356f9749195fc2745f7076b5b165ff56de0596018b8251a0bd700db48a2243fe56831cf6785d70ded595b1bf9b25f2979923176109adb8012ae650c3fcb110352b884f79aeb465817124f75cda3168ec65cdace89522c0a7061629ea0d5d0573b9aa029500d64cb5df4f440859e4944047e6967511f0f25e9a45751d296ed6b61d4f217c28672d34696fcbaad5a57fd0e063537e889df2bf9e20e6c075296a800179a23e605948dc74fcf0c4ea958884d", 0xc9a}, {&(0x7f00000009c0)="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", 0x137}, {&(0x7f0000000980)="281a9d23fdff", 0x6}, {&(0x7f0000000680)="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", 0x1f8}], 0x5}, 0x4005) 4m33.375086409s ago: executing program 34 (id=4806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 4m32.881437404s ago: executing program 35 (id=4811): syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 15.889697434s ago: executing program 7 (id=5716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e24, 0x0, @mcast1, 0xffffffff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) sched_setscheduler(0x0, 0x2, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 13.045979282s ago: executing program 1 (id=5733): socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x47c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon, @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x449, 0x91, "f60f4a5b8ffcc35618164f3c8caeaf2fa1e063b6bc0000b043dadea0ce611d31b0f4704a784fe322a73f44f9630e1896a1c3047c53c24ed512cafa46af202deb4713dc8188ffd73a9b0988b6343164434376a9060c54b972d1d6aacf36f8ca51af4562013805163443568001b6b4084130ff1582be24f825151cf8f2532ce4a9a0105778654878e81f5a354acc5b9eccf1017510814b1f79dd74ebe55959c5387408b45bbb455549f8f03c38cf61ce2c74bbf0ab6b264a3129b13355f16579ed6376f7dd58672ff6ff96578efb6e3339d2a6426dff86966f8708379715e057c96e142525ebdcfc253ea2cbbc4413b91bc6e506f201800f1cffb933558580f36f88c4cec3a02fc24d7938df61692587d131b7cfd7bbea1beb042716e4d7cc2cd4158f79d93650eebaf6ed6e6505132ce553e8ec56bf509c7e153fef7a6228342bcccf567110cecd351c77c94f0ea6b582cab878d38fae494c5bfa27f808d77d52b2637b33101247b7098f8d0aa726189e105bcb35c511d33c820e961523238f71fc428c1a0135fa246c4e3842649ed8b96b74fd5aab41f28890caee45b93dc6b12413cf05f34c373e6a5f7c42c58f219c10dccd43aa7d5f96d9fe6dc31f3521f3e68fa5288726bf3862fac13bd1de91a25bbf677167d801c44d74d6705aac9e94403b7f59094ad5d4865b2b6561e7e3296f22a55f50d1d9f65bec2e3b6acd80d724d2b9c1fc61af567a0744ce1c75f7ccf65488967a4f77445616232329287016debf83d5dd48fdf8494446c44bf518c9b0203a90e953397aa8744a3e4ba016f76bf541d9073935827eab3c2322e3ee2d1cb61f5417adf4292c93dfba1facb6ac92141308d052056262aa37b3a7b8061e33151a383410c28a91e82f5c6cc457c89380a54384a8337b7cc608f9243bb9313501bfe0dc4f0b0def6695e763918a1fcc47f58559827b8d91198022771d800a27ce1adc59adbe0814142eb33b90e1d0e273dd0548c1b2a3ec5a002477287652f3fb12644d804cd4545aed1567b68832b2b237cdbae0c0201e83bfa3ccf9789095b54b01a529c4b348714185bf27205732237d61a5a51ad1e79725fd9d38f9f493157e25e84692d908ad5d353495625a43ed32e0feaa4576dbaea41f915d6243bc212d835b74b7840081dc5ca4a2be87ddd546266de579771c73308f5104bbdddc72e7435a1756353cb100c1a4155377f1ea79bf83dafa6d610bf449e0a67de86461eccff2eb3e0a8a798f0e80d38c1cadacef518923cbb978004e346f99aaaab17fd66593202748ba6b416b22596686008b73cfaeaa852885b8b6a38e181454d7451a8534a3cfd688b81289faf470336da2022aefa064c898a21fd6d9532ef22bada8a3171cfe34b182702448069973948016139a48a4b8238d9d51b33f6ff3a6af0de20fad6850eb0dc878e093aa9da365bb3f4ddc672f13c4b40614e0c43033006728de043cf4d0545a4432bf2ce084393e054ba77ef5d3cae82e14c538bd1aab5f9ab8006e93ebb21fffcb30f1a27e3c7a37ce"}, @NL80211_ATTR_PROBE_RESP={0x4}]]}, 0x47c}}, 0x0) 11.379026539s ago: executing program 1 (id=5738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e24, 0x0, @mcast1, 0xffffffff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sched_setscheduler(0x0, 0x2, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) getpid() 10.657719938s ago: executing program 7 (id=5743): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000016c0)=0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg(r3, &(0x7f0000003800)=[{{&(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000540)}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001780)="08717a1c5fa08632797cf5d4b7c04cde8374a409c6e80871d07f31bedc75c077f1682f513e6decf06876d6a05c65e2972555dbeec2af1f16a27cfa589e4049557a17f1163c6dd81d0338c6d1b09e890d410f09b3329667c0d2b8b7d05461e79f5b8a5d4376b588067fe82bab82ce95037dc6d97b1f4f120dd502bc5925729eb3df756e589b91900ddbff52c983cb67a7899737b2d87c8eafa55f", 0x9a}, {&(0x7f0000001840)="a2599faf7a92ca7c473b967fd01bcfbe0a4191e22cad5cf334dea90ceb7bde630eb03c168284e3955de178170fe240cee8cdf0a417a2285f824400c8f4e6564f5393ca4477dbd2d73a31fd334512ca4bb6e1cd7516f9e25db02e5d2b024eb4b6312d09bfd0bf1b5cb2e0cfe1c14c1b78db246294cfc23a5042afeda9a36be7ae64bc57070f29b0f207ec5615b54dcea942afaf02917eb52edb3081e509a1a304341120a6b38608b6b47030379fa92ec7b4cc7d62fe074f54ee9cf3285280dafad10cfa20dc", 0xc5}, {&(0x7f0000001a40)="f45e73d3e63929", 0x7}, {&(0x7f0000001a80)="87b19f9733fe3c3e74c7c74557cb4567c06cca6247e29b7d42c8f9801f2a59171082baee07c42c1397a97e18f14aa3cc604f81429495a06a8f56d9deff5307fcdfcee7e142fe65bda6ecc583397dc274027bc0195dc6a9dc99aedd1e1312ce63c721e3678b2bb9bd10baadba82e73227999f2e0d25144bac9dc56342cf304f", 0x7f}, {0x0}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/350], 0xb8}}, {{&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x3, 0x2, {0xa, 0x4e22, 0x7, @empty, 0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000003680)=ANY=[@ANYBLOB="40000000000000000201000006000000a3301bbeafaff779a1e7f3a748e5201ba0f0202560dba0dc6997debc53b9d45e635beab7c4fcba5b704f9f4e000000005cc7e1a8b25cc5dc6b81df2bdb4335d5b632c5242f418eff288b355d19f4bb85b8a72f743fe76ced9d1a10995d3ffcca63ce6d1d7bda6922043489cebd192a501805600329d72a981fa630b506f8784d54555b1cc888d477fe4a30c03f2d053ce70774f2051cabc15d4731ecf48feebb83e61e7259fb5baa2e6a176c541c90eca314ddc86f246b5d45e1be0e23dbae6887916b00"/231], 0xe8}}], 0x3, 0x8004) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002cbd7000fcdbdf2506000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="0800030044010800bdbdeb004cf825c516bdb41b0ceb75ccd89c95548f7d07bc75007e50762e1d49c3657caeea3f6185f5c7cd98c570605ef48b97ce5fc47bbcd15fc91d1d139a8d0a04f697d1118d615742d8f5cb6284288356e34e104f19aaaf081465d946fca203997023199b9184c08bc4cf09930dd5ee6fd605838d7160db678e29"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x880) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400ac70f47d746b550af77e950000", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf251500000008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40004) syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r7 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00030200c500fff48fe56eaa5084509ea0b593bd02038d7c151e70"]}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="e98b1c91c7005ce25596f7a93aea5da81dbd3ba69f0ddbe86daffc44cc0b848e67faac6653da188fef3b740d7c91c0c7e5fc38b626f603d7694ec83f4ce15cb515bfaf553e", 0x45}], 0x1, 0x0, 0x3a0}}], 0x1, 0x810) r8 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r9 = socket(0x1, 0x5, 0x0) close(r9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000040)={0x80000004}) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x5, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)='\t', 0x1) close(0xffffffffffffffff) 9.783387648s ago: executing program 8 (id=5748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e24, 0x0, @mcast1, 0xffffffff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sched_setscheduler(0x0, 0x2, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 8.399711274s ago: executing program 1 (id=5756): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x1, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x35, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x6) 7.232317204s ago: executing program 7 (id=5765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 6.536573658s ago: executing program 8 (id=5771): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.471932409s ago: executing program 7 (id=5772): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)=@newlinkprop={0x6c, 0x6c, 0x0, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20504, 0x800}, [@IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_LINKMODE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc084}, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f00000000c0)=0x8) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r5, 0x550c, 0x0) mq_timedreceive(r4, 0x0, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149a82, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fcntl$notify(r7, 0x402, 0x6) setsockopt$inet6_group_source_req(r6, 0x29, 0x7, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$cgroup_int(r8, &(0x7f0000000100)=0xdf9c, 0x12) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="93", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) listen(r9, 0x5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000001c0)={r10, 0x2}, 0x8) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001c8, 0x12) 6.260595169s ago: executing program 8 (id=5775): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000016c0)=0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg(r3, &(0x7f0000003800)=[{{&(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000540)}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001780)="08717a1c5fa08632797cf5d4b7c04cde8374a409c6e80871d07f31bedc75c077f1682f513e6decf06876d6a05c65e2972555dbeec2af1f16a27cfa589e4049557a17f1163c6dd81d0338c6d1b09e890d410f09b3329667c0d2b8b7d05461e79f5b8a5d4376b588067fe82bab82ce95037dc6d97b1f4f120dd502bc5925729eb3df756e589b91900ddbff52c983cb67a7899737b2d87c8eafa55f", 0x9a}, {&(0x7f0000001840)="a2599faf7a92ca7c473b967fd01bcfbe0a4191e22cad5cf334dea90ceb7bde630eb03c168284e3955de178170fe240cee8cdf0a417a2285f824400c8f4e6564f5393ca4477dbd2d73a31fd334512ca4bb6e1cd7516f9e25db02e5d2b024eb4b6312d09bfd0bf1b5cb2e0cfe1c14c1b78db246294cfc23a5042afeda9a36be7ae64bc57070f29b0f207ec5615b54dcea942afaf02917eb52edb3081e509a1a304341120a6b38608b6b47030379fa92ec7b4cc7d62fe074f54ee9cf3285280dafad10cfa20dc", 0xc5}, {&(0x7f0000001a40)="f45e73d3e63929", 0x7}, {&(0x7f0000001a80)="87b19f9733fe3c3e74c7c74557cb4567c06cca6247e29b7d42c8f9801f2a59171082baee07c42c1397a97e18f14aa3cc604f81429495a06a8f56d9deff5307fcdfcee7e142fe65bda6ecc583397dc274027bc0195dc6a9dc99aedd1e1312ce63c721e3678b2bb9bd10baadba82e73227999f2e0d25144bac9dc56342cf304f", 0x7f}, {0x0}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/350], 0xb8}}, {{&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x3, 0x2, {0xa, 0x4e22, 0x7, @empty, 0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000003680)=ANY=[@ANYBLOB="40000000000000000201000006000000a3301bbeafaff779a1e7f3a748e5201ba0f0202560dba0dc6997debc53b9d45e635beab7c4fcba5b704f9f4e000000005cc7e1a8b25cc5dc6b81df2bdb4335d5b632c5242f418eff288b355d19f4bb85b8a72f743fe76ced9d1a10995d3ffcca63ce6d1d7bda6922043489cebd192a501805600329d72a981fa630b506f8784d54555b1cc888d477fe4a30c03f2d053ce70774f2051cabc15d4731ecf48feebb83e61e7259fb5baa2e6a176c541c90eca314ddc86f246b5d45e1be0e23dbae6887916b00"/231], 0xe8}}], 0x3, 0x8004) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002cbd7000fcdbdf2506000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="0800030044010800bdbdeb004cf825c516bdb41b0ceb75ccd89c95548f7d07bc75007e50762e1d49c3657caeea3f6185f5c7cd98c570605ef48b97ce5fc47bbcd15fc91d1d139a8d0a04f697d1118d615742d8f5cb6284288356e34e104f19aaaf081465d946fca203997023199b9184c08bc4cf09930dd5ee6fd605838d7160db678e29"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x880) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400ac70f47d746b550af77e950000", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf251500000008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40004) syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r7 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00030200c500fff48fe56eaa5084509ea0b593bd02038d7c151e70"]}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="e98b1c91c7005ce25596f7a93aea5da81dbd3ba69f0ddbe86daffc44cc0b848e67faac6653da188fef3b740d7c91c0c7e5fc38b626f603d7694ec83f4ce15cb515bfaf553e", 0x45}], 0x1, 0x0, 0x3a0}}], 0x1, 0x810) r8 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r9 = socket(0x1, 0x5, 0x0) close(r9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000040)={0x80000004}) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x5, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)='\t', 0x1) close(0xffffffffffffffff) 6.224925291s ago: executing program 1 (id=5776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e24, 0x0, @mcast1, 0xffffffff}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{0x0}], 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4}, 0x1c) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sched_setscheduler(0x0, 0x2, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 4.819566147s ago: executing program 5 (id=5785): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r3, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DO_IT(r0, 0xab03) 4.148023251s ago: executing program 8 (id=5791): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x8801) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0xc820) syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000001c0)={0x980901, 0xfffffff2, @value=0x9}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x28, 0x6000, @fd, 0x5, 0x0, 0x0, 0x21}) io_uring_enter(0xffffffffffffffff, 0x567, 0x1000a387, 0x20, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000001680)=0x7) 2.602743938s ago: executing program 7 (id=5794): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) 2.539923866s ago: executing program 8 (id=5795): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.458378435s ago: executing program 5 (id=5796): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0x183}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d830007"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.103214507s ago: executing program 5 (id=5799): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x4009e7d, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000240)={0xfffffffd, 0x283, "a08dfe142f24213a6bc557b6c0d8bdf34a5cd4d09ee724db28cfb638b6c5eb2a", 0x9, 0x2, 0x5, 0x40}) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r9, 0xffffffffffffffff, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f00000000c0)=0x7) 1.966371708s ago: executing program 8 (id=5801): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000016c0)=0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg(r3, &(0x7f0000003800)=[{{&(0x7f0000000300)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000540)}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001780)="08717a1c5fa08632797cf5d4b7c04cde8374a409c6e80871d07f31bedc75c077f1682f513e6decf06876d6a05c65e2972555dbeec2af1f16a27cfa589e4049557a17f1163c6dd81d0338c6d1b09e890d410f09b3329667c0d2b8b7d05461e79f5b8a5d4376b588067fe82bab82ce95037dc6d97b1f4f120dd502bc5925729eb3df756e589b91900ddbff52c983cb67a7899737b2d87c8eafa55f", 0x9a}, {&(0x7f0000001840)="a2599faf7a92ca7c473b967fd01bcfbe0a4191e22cad5cf334dea90ceb7bde630eb03c168284e3955de178170fe240cee8cdf0a417a2285f824400c8f4e6564f5393ca4477dbd2d73a31fd334512ca4bb6e1cd7516f9e25db02e5d2b024eb4b6312d09bfd0bf1b5cb2e0cfe1c14c1b78db246294cfc23a5042afeda9a36be7ae64bc57070f29b0f207ec5615b54dcea942afaf02917eb52edb3081e509a1a304341120a6b38608b6b47030379fa92ec7b4cc7d62fe074f54ee9cf3285280dafad10cfa20dc", 0xc5}, {&(0x7f0000001a40)="f45e73d3e63929", 0x7}, {&(0x7f0000001a80)="87b19f9733fe3c3e74c7c74557cb4567c06cca6247e29b7d42c8f9801f2a59171082baee07c42c1397a97e18f14aa3cc604f81429495a06a8f56d9deff5307fcdfcee7e142fe65bda6ecc583397dc274027bc0195dc6a9dc99aedd1e1312ce63c721e3678b2bb9bd10baadba82e73227999f2e0d25144bac9dc56342cf304f", 0x7f}, {0x0}], 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/350], 0xb8}}, {{&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x3, 0x2, {0xa, 0x4e22, 0x7, @empty, 0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000003680)=ANY=[@ANYBLOB="40000000000000000201000006000000a3301bbeafaff779a1e7f3a748e5201ba0f0202560dba0dc6997debc53b9d45e635beab7c4fcba5b704f9f4e000000005cc7e1a8b25cc5dc6b81df2bdb4335d5b632c5242f418eff288b355d19f4bb85b8a72f743fe76ced9d1a10995d3ffcca63ce6d1d7bda6922043489cebd192a501805600329d72a981fa630b506f8784d54555b1cc888d477fe4a30c03f2d053ce70774f2051cabc15d4731ecf48feebb83e61e7259fb5baa2e6a176c541c90eca314ddc86f246b5d45e1be0e23dbae6887916b00"/231], 0xe8}}], 0x3, 0x8004) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002cbd7000fcdbdf2506000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="0800030044010800bdbdeb004cf825c516bdb41b0ceb75ccd89c95548f7d07bc75007e50762e1d49c3657caeea3f6185f5c7cd98c570605ef48b97ce5fc47bbcd15fc91d1d139a8d0a04f697d1118d615742d8f5cb6284288356e34e104f19aaaf081465d946fca203997023199b9184c08bc4cf09930dd5ee6fd605838d7160db678e29"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x880) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400ac70f47d746b550af77e950000", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf251500000008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40004) syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r7 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x110, 0x27, 0xaa, 0x18, 0x8, 0x402, 0x5602, 0x4983, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x52, 0xb4, 0xa6, 0x2c}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00030200c500fff48fe56eaa5084509ea0b593bd02038d7c151e70"]}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="e98b1c91c7005ce25596f7a93aea5da81dbd3ba69f0ddbe86daffc44cc0b848e67faac6653da188fef3b740d7c91c0c7e5fc38b626f603d7694ec83f4ce15cb515bfaf553e", 0x45}], 0x1, 0x0, 0x3a0}}], 0x1, 0x810) r8 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r9 = socket(0x1, 0x5, 0x0) close(r9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f0000000040)={0x80000004}) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x5, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)='\t', 0x1) close(0xffffffffffffffff) 1.918432304s ago: executing program 6 (id=5802): mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./bus\x00') 1.739850567s ago: executing program 6 (id=5803): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.675394737s ago: executing program 6 (id=5804): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)=@newlinkprop={0x6c, 0x6c, 0x0, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20504, 0x800}, [@IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_LINKMODE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc084}, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f00000000c0)=0x8) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={'sha384\x00'}}) r4 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r5, 0x550c, 0x0) mq_timedreceive(r4, 0x0, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149a82, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fcntl$notify(r7, 0x402, 0x6) setsockopt$inet6_group_source_req(r6, 0x29, 0x7, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x2, @local, 0x5}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}, 0x108) r8 = syz_open_procfs(0x0, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0xdf9c, 0x12) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="93", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) listen(r9, 0x5) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000001c0)={r10, 0x2}, 0x8) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001c8, 0x12) 474.669471ms ago: executing program 6 (id=5805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050", @ANYRES8=r0], 0x3c}}, 0x10) 367.576992ms ago: executing program 5 (id=5806): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 328.811263ms ago: executing program 7 (id=5807): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffff3) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r3, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_DO_IT(r0, 0xab03) prctl$PR_SET_MM(0x22, 0x0, &(0x7f0000000000/0x4000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x24) 302.179185ms ago: executing program 1 (id=5808): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="0ddf", 0x2}], 0x1}}], 0x1, 0x4001) 203.797205ms ago: executing program 5 (id=5809): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0x183}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d830007"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 148.353893ms ago: executing program 6 (id=5810): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x1, @loopback, 0x3}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544507684004000b42a28000000000000010208a0e2f964e0000c534b602cd6193fc049b2df3eea18afaa4ff1f5600000000000000000000000000ff00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) listen(r0, 0x800) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 67.675787ms ago: executing program 1 (id=5811): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2fad8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.001405ms ago: executing program 6 (id=5812): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x178) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) poll(&(0x7f0000000380)=[{r7, 0x1200}], 0x1, 0x60000000) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) getdents64(r5, &(0x7f00000000c0)=""/42, 0x2a) lseek(r6, 0x7, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x4, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdffffffbe, 0xfdfffffffffffff9, 0x100, 0x9, 0xc82, 0x767], 0xeeef0000, 0x81082}) 0s ago: executing program 5 (id=5813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0xffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x800000, 0x53}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x178) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) poll(&(0x7f0000000380)=[{r7, 0x1200}], 0x1, 0x60000000) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) getdents64(r5, &(0x7f00000000c0)=""/42, 0x2a) lseek(r6, 0x7, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x4, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdffffffbe, 0xfdfffffffffffff9, 0x100, 0x9, 0xc82, 0x767], 0xeeef0000, 0x81082}) kernel console output (not intermixed with test programs): 1632.931642][T11285] pimreg (unregistering): left allmulticast mode [ 1635.274901][T20431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4762'. [ 1635.318199][T20434] fuse: Bad value for 'group_id' [ 1635.318340][T20434] fuse: Bad value for 'group_id' [ 1635.319061][T20434] fuse: Bad value for 'group_id' [ 1635.319077][T20434] fuse: Bad value for 'group_id' [ 1635.722002][ T10] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1635.874608][T11285] team0 (unregistering): Port device team_slave_1 removed [ 1635.897133][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1635.897798][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1635.902261][ T10] usb 4-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 1635.902301][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1635.944060][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 1635.944095][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.944116][ T10] usb 4-1: Product: ᜫ큌⟓᫏眈一瀛揜ᅘ꿍ῖꑦ㈞峈㭄᤽䪸㍛㤉೏᱗삝햽欭泛ꆘ娴坩ꁚ즛혰䉪Ơ羓됌苌뎘踾付剭ጮ磷ꭸ곆锡茇䰛첎醅뎗粊ဿ☗췥ᘮ瘇⛔츩燐되壇֡绐ᾑ喝츱홟ﹶ亽농蠆ⷁ㛼愽㬲崙瞪飑ꅒ㩀´圎Ꮤ硵문꾼晪霫樎筴陴ꇳ希齉頒ഃጦ녾呚᳿嘤뢲䚈铞挜 [ 1635.944151][ T10] usb 4-1: Manufacturer: ᐌ [ 1635.944167][ T10] usb 4-1: SerialNumber: Ђ [ 1636.055209][T11285] team0 (unregistering): Port device team_slave_0 removed [ 1638.596870][ T10] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1638.680079][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1638.853432][ T10] usb 4-1: USB disconnect, device number 58 [ 1639.051625][T19726] udevd[19726]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1640.627603][T20489] syz_tun: entered allmulticast mode [ 1641.629066][T20502] syzkaller0: entered promiscuous mode [ 1641.629094][T20502] syzkaller0: entered allmulticast mode [ 1642.830752][T20524] syz_tun: entered allmulticast mode [ 1642.890180][T20158] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1643.915228][T20158] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1644.166782][T20158] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1644.231578][T20535] tmpfs: Unknown parameter 'measure' [ 1644.262133][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 1644.262155][ T36] audit: type=1326 audit(4000002904.636:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20529 comm="syz.4.4792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa23d94c799 code=0x0 [ 1644.299714][T20158] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1644.321449][T20530] block nbd4: Device being setup by another task [ 1644.408889][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1644.690907][ T5113] block nbd4: Receive control failed (result -32) [ 1645.204073][T20532] block nbd4: shutting down sockets [ 1645.506180][T20158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.173199][T20158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1646.407017][T20569] syzkaller0: entered promiscuous mode [ 1646.407051][T20569] syzkaller0: entered allmulticast mode [ 1646.450934][T20583] autofs: Unknown parameter '0x0000000000000000' [ 1646.465539][T15643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.465688][T15643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.500558][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.500646][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.491868][T20606] fuse: Bad value for 'user_id' [ 1647.491891][T20606] fuse: Bad value for 'user_id' [ 1648.658377][T20627] autofs: Unknown parameter '0x0000000000000000' [ 1661.980812][T20276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1661.985671][T20276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1661.989297][T20276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1662.018295][T20276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1662.069776][T20276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1664.039551][T20276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1664.061413][T20276] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1664.063841][T20276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1664.065461][T20276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1664.066208][T20276] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1664.330291][T20645] fuse: Bad value for 'user_id' [ 1664.330312][T20645] fuse: Bad value for 'user_id' [ 1664.334657][ T5113] Bluetooth: hci5: command tx timeout [ 1664.897893][T20276] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1664.903665][T20276] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1664.906330][T20276] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1664.962133][T20276] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1664.991045][T20276] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1665.503181][ T36] audit: type=1326 audit(4000002924.504:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20653 comm="syz.1.4820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x0 [ 1665.751842][T12275] syz_tun (unregistering): left allmulticast mode [ 1665.808283][ T5113] block nbd1: Receive control failed (result -32) [ 1665.808359][T20276] block nbd1: Receive control failed (result -32) [ 1665.931410][T20643] block nbd1: shutting down sockets [ 1666.296108][T20276] Bluetooth: hci6: command tx timeout [ 1666.556948][T20276] Bluetooth: hci5: command tx timeout [ 1666.596546][ T5877] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1666.766454][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 1666.768292][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.768361][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1666.768380][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1666.768393][ T5877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1666.768406][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1666.769545][ T5877] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1666.769570][ T5877] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1666.769590][ T5877] usb 2-1: Manufacturer: syz [ 1666.772842][ T5877] usb 2-1: config 0 descriptor?? [ 1667.018421][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.090367][ T5877] rc_core: IR keymap rc-hauppauge not found [ 1667.090383][ T5877] Registered IR keymap rc-empty [ 1667.090605][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.108549][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.131081][ T5877] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1667.133512][ T5877] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input120 [ 1667.162704][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.185497][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.207000][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.226109][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.238404][T20276] Bluetooth: hci7: command tx timeout [ 1667.247759][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.269370][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.292381][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.314954][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.337897][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.357387][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1667.388334][ T5877] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1667.388354][ T5877] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1667.620793][T20659] netlink: 'syz.1.4821': attribute type 8 has an invalid length. [ 1667.638280][T10324] usb 2-1: USB disconnect, device number 59 [ 1667.695964][T20643] udevd[20643]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1667.764365][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.136923][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.287931][T20672] autofs: Unknown parameter '0x0000000000000000' [ 1668.363509][T20675] overlayfs: missing 'workdir' [ 1668.519608][T20276] Bluetooth: hci6: command tx timeout [ 1668.538672][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.738611][T20682] fuse: Bad value for 'fd' [ 1668.776965][T20276] Bluetooth: hci5: command tx timeout [ 1668.876660][T20641] chnl_net:caif_netlink_parms(): no params data found [ 1668.923243][T20158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1670.067738][T20276] Bluetooth: hci7: command tx timeout [ 1670.138030][T20637] chnl_net:caif_netlink_parms(): no params data found [ 1670.345506][T20641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.345617][T20641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.345794][T20641] bridge_slave_0: entered allmulticast mode [ 1670.347460][T20641] bridge_slave_0: entered promiscuous mode [ 1670.391176][T20703] autofs: Unknown parameter 'fd0x0000000000000000' [ 1670.434039][T20641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.434265][T20641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.434527][T20641] bridge_slave_1: entered allmulticast mode [ 1670.437422][T20641] bridge_slave_1: entered promiscuous mode [ 1670.543271][T20707] overlayfs: missing 'workdir' [ 1670.587862][T20651] chnl_net:caif_netlink_parms(): no params data found [ 1670.743406][T20276] Bluetooth: hci6: command tx timeout [ 1670.764040][T20641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.837951][T20641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1670.877719][T20714] fuse: Bad value for 'fd' [ 1670.999894][T20276] Bluetooth: hci5: command tx timeout [ 1671.015286][ T13] bridge_slave_1: left allmulticast mode [ 1671.015322][ T13] bridge_slave_1: left promiscuous mode [ 1671.015625][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.087423][ T13] bridge_slave_0: left allmulticast mode [ 1671.087733][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.374811][T20729] fuse: Bad value for 'fd' [ 1672.296436][T20276] Bluetooth: hci7: command tx timeout [ 1672.498308][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.564610][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.605735][ T13] bond0 (unregistering): Released all slaves [ 1672.646247][T20637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.646375][T20637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.646579][T20637] bridge_slave_0: entered allmulticast mode [ 1672.648172][T20637] bridge_slave_0: entered promiscuous mode [ 1672.661808][T20641] team0: Port device team_slave_0 added [ 1672.847810][T20637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.847937][T20637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.848196][T20637] bridge_slave_1: entered allmulticast mode [ 1672.867826][T20637] bridge_slave_1: entered promiscuous mode [ 1672.923086][T20641] team0: Port device team_slave_1 added [ 1672.935739][ T13] IPVS: stopping backup sync thread 19013 ... [ 1672.966878][T20276] Bluetooth: hci6: command tx timeout [ 1673.081994][T20651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.082279][T20651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.082542][T20651] bridge_slave_0: entered allmulticast mode [ 1673.089221][T20651] bridge_slave_0: entered promiscuous mode [ 1673.284771][T20746] fuse: Bad value for 'fd' [ 1673.410635][T20637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.411613][T20641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.411629][T20641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.411655][T20641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.519298][T20651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.519405][T20651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.519580][T20651] bridge_slave_1: entered allmulticast mode [ 1673.521201][T20651] bridge_slave_1: entered promiscuous mode [ 1673.525381][T20641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.525397][T20641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1673.525422][T20641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.595640][T20637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.309950][T20651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.312504][T20637] team0: Port device team_slave_0 added [ 1674.344337][T20651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.356334][T20637] team0: Port device team_slave_1 added [ 1674.518216][T20276] Bluetooth: hci7: command tx timeout [ 1674.560979][ T13] hsr_slave_0: left promiscuous mode [ 1674.581464][ T13] hsr_slave_1: left promiscuous mode [ 1674.582312][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.582332][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1674.625332][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.625361][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.727526][ T13] veth1_macvtap: left promiscuous mode [ 1674.727600][ T13] veth0_macvtap: left promiscuous mode [ 1674.727782][ T13] veth1_vlan: left promiscuous mode [ 1674.727888][ T13] veth0_vlan: left promiscuous mode [ 1674.960803][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4849'. [ 1675.554903][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1675.597877][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1675.829229][T20641] hsr_slave_0: entered promiscuous mode [ 1675.830239][T20641] hsr_slave_1: entered promiscuous mode [ 1675.830916][T20641] debugfs: 'hsr0' already exists in 'hsr' [ 1675.830934][T20641] Cannot create hsr debugfs directory [ 1675.965309][T20651] team0: Port device team_slave_0 added [ 1675.967711][T20637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.967728][T20637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1675.967758][T20637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.027811][T20637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.027831][T20637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.027857][T20637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.030868][T20651] team0: Port device team_slave_1 added [ 1676.771214][T20158] veth0_vlan: entered promiscuous mode [ 1677.117735][T20651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.117793][T20651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.117850][T20651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.308970][T20651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.308990][T20651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.309015][T20651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.646854][T20637] hsr_slave_0: entered promiscuous mode [ 1677.648488][T20637] hsr_slave_1: entered promiscuous mode [ 1677.666121][T20637] debugfs: 'hsr0' already exists in 'hsr' [ 1677.666151][T20637] Cannot create hsr debugfs directory [ 1677.921345][ T5113] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1677.949115][ T5113] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1677.955412][ T5113] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1677.970440][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1677.972694][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1678.053244][T20651] hsr_slave_0: entered promiscuous mode [ 1678.070771][T20651] hsr_slave_1: entered promiscuous mode [ 1678.073815][T20651] debugfs: 'hsr0' already exists in 'hsr' [ 1678.073846][T20651] Cannot create hsr debugfs directory [ 1678.221604][T20770] fuse: Bad value for 'fd' [ 1678.707988][T13332] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1678.938438][T13332] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1678.938476][T13332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.938497][T13332] usb 2-1: Product: syz [ 1678.938513][T13332] usb 2-1: Manufacturer: syz [ 1678.938528][T13332] usb 2-1: SerialNumber: syz [ 1680.043298][T20641] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1680.236659][ T5113] Bluetooth: hci1: command tx timeout [ 1680.303967][T20775] binder: BINDER_SET_CONTEXT_MGR already set [ 1680.303985][T20775] binder: 20774:20775 ioctl 4018620d 200000000040 returned -16 [ 1680.307714][T13332] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1680.307781][T13332] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1680.308770][T13332] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1680.377191][T13332] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1680.394672][T13332] usb 2-1: USB disconnect, device number 60 [ 1680.477943][T20641] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1680.789198][T20641] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1680.881681][T20641] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1681.958264][T20637] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1682.045695][T20637] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1682.343260][T20637] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1682.460176][ T5113] Bluetooth: hci1: command tx timeout [ 1682.498987][T20637] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1682.635106][T20762] chnl_net:caif_netlink_parms(): no params data found [ 1682.824744][T20651] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1682.880168][T20651] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1683.007546][T20651] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1683.074088][T20651] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1683.163015][T20762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.163152][T20762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.163366][T20762] bridge_slave_0: entered allmulticast mode [ 1683.165199][T20762] bridge_slave_0: entered promiscuous mode [ 1683.211664][T20762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.211841][T20762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.212474][T20762] bridge_slave_1: entered allmulticast mode [ 1683.215857][T20762] bridge_slave_1: entered promiscuous mode [ 1683.416910][T20841] fuse: Bad value for 'fd' [ 1683.438486][T20762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1683.463806][T20762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.681255][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.753774][T10324] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1683.778124][T20762] team0: Port device team_slave_0 added [ 1683.937809][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.975396][T10324] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1683.975430][T10324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.975448][T10324] usb 2-1: Product: syz [ 1683.975457][T10324] usb 2-1: Manufacturer: syz [ 1683.975465][T10324] usb 2-1: SerialNumber: syz [ 1683.991546][T20762] team0: Port device team_slave_1 added [ 1684.072858][T20762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.072878][T20762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.072907][T20762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.132152][T20762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.132173][T20762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.132199][T20762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.364286][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.683997][ T5113] Bluetooth: hci1: command tx timeout [ 1684.703321][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.806387][T20641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.884810][T20762] hsr_slave_0: entered promiscuous mode [ 1684.886649][T20762] hsr_slave_1: entered promiscuous mode [ 1684.890898][T20762] debugfs: 'hsr0' already exists in 'hsr' [ 1684.890927][T20762] Cannot create hsr debugfs directory [ 1685.119169][T20641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.266766][T11287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.266972][T11287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.296857][T20637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1685.356274][T20843] binder: BINDER_SET_CONTEXT_MGR already set [ 1685.356293][T20843] binder: 20842:20843 ioctl 4018620d 200000000040 returned -16 [ 1685.371136][T10324] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1685.371200][T10324] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1685.373799][T10324] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1685.436671][T10324] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1685.460070][T10324] usb 2-1: USB disconnect, device number 61 [ 1685.491080][T11287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.491167][T11287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1685.771441][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.986718][T20637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.153691][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.233116][T20651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.355169][T11285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.355880][T11285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.610295][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.794049][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.794196][T11289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.907622][ T5113] Bluetooth: hci1: command tx timeout [ 1686.978129][ T13] netdevsim netdevsim4 5@ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.241319][T20651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1687.286524][T11287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.286645][T11287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1687.359073][T11287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.359335][T11287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1688.063161][ T13] bridge_slave_1: left allmulticast mode [ 1688.063193][ T13] bridge_slave_1: left promiscuous mode [ 1688.063461][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.170031][ T13] bridge_slave_0: left allmulticast mode [ 1688.170054][ T13] bridge_slave_0: left promiscuous mode [ 1688.170226][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.269208][ T13] bridge_slave_1: left allmulticast mode [ 1688.269233][ T13] bridge_slave_1: left promiscuous mode [ 1688.269393][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.426917][ T13] bridge_slave_0: left allmulticast mode [ 1688.426941][ T13] bridge_slave_0: left promiscuous mode [ 1688.427108][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.515850][ T13] bond0: left allmulticast mode [ 1688.515868][ T13] bond_slave_0: left allmulticast mode [ 1688.515882][ T13] bond_slave_1: left allmulticast mode [ 1688.516119][ T13] bridge0: port 3(bond0) entered disabled state [ 1688.598357][ T13] bridge_slave_1: left allmulticast mode [ 1688.598379][ T13] bridge_slave_1: left promiscuous mode [ 1688.598541][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.671690][ T5877] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1688.673343][ T13] bridge_slave_0: left allmulticast mode [ 1688.673376][ T13] bridge_slave_0: left promiscuous mode [ 1688.673653][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.849517][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.849557][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1688.849583][ T5877] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1688.849600][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.858770][ T5877] usb 2-1: config 0 descriptor?? [ 1689.313307][T20869] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1692.724927][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1692.798980][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1692.845989][ T13] bond0 (unregistering): Released all slaves [ 1693.525863][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1693.594506][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.621499][ T13] bond0 (unregistering): Released all slaves [ 1693.686867][ T13] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1693.730129][ T13] bond1 (unregistering): Released all slaves [ 1693.753207][ T13] bond2 (unregistering): Released all slaves [ 1694.264516][ T5877] usbhid 2-1:0.0: can't add hid device: -32 [ 1694.264622][ T5877] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1694.436046][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1694.477057][ T13] bond_slave_0: left promiscuous mode [ 1694.520451][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1694.541246][ T13] bond_slave_1: left promiscuous mode [ 1694.543037][ T13] bond0 (unregistering): Released all slaves [ 1694.594557][ T13] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1694.616363][ T13] bond1 (unregistering): Released all slaves [ 1694.631163][ T13] bond2 (unregistering): Released all slaves [ 1694.823819][ T5905] usb 2-1: USB disconnect, device number 62 [ 1695.042944][T20762] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1695.117200][T20762] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1695.196418][T20762] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1695.272639][T20641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.287155][T20762] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1695.471415][T20637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.119895][T20909] fuse: Unknown parameter 'grou00000000000000000000' [ 1696.120543][T20909] fuse: Unknown parameter 'grou00000000000000000000' [ 1697.248358][T20651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.758521][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1697.934495][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1697.934531][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1697.934574][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1697.934593][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.939534][ T10] usb 2-1: config 0 descriptor?? [ 1698.244919][T20762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.265179][ T13] hsr_slave_0: left promiscuous mode [ 1701.628530][ T13] hsr_slave_1: left promiscuous mode [ 1701.680327][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.178617][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.274184][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1702.274271][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1702.313039][ T10] usb 2-1: USB disconnect, device number 63 [ 1702.536456][ T13] hsr_slave_0: left promiscuous mode [ 1702.584693][ T13] hsr_slave_1: left promiscuous mode [ 1702.585751][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1702.585770][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.625128][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1702.625160][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.825768][ T13] hsr_slave_0: left promiscuous mode [ 1702.868668][ T13] hsr_slave_1: left promiscuous mode [ 1702.869737][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1702.869761][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.894693][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1702.894722][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.044501][ T13] veth0_vlan: left promiscuous mode [ 1703.061528][ T13] veth1_macvtap: left promiscuous mode [ 1703.061643][ T13] veth0_macvtap: left promiscuous mode [ 1703.061945][ T13] veth1_vlan: left promiscuous mode [ 1703.062146][ T13] veth0_vlan: left promiscuous mode [ 1703.235301][ T13] veth1_macvtap: left promiscuous mode [ 1703.235423][ T13] veth0_macvtap: left promiscuous mode [ 1703.235748][ T13] veth1_vlan: left promiscuous mode [ 1703.235950][ T13] veth0_vlan: left promiscuous mode [ 1703.264225][T20953] fuse: Unknown parameter 'grou00000000000000000000' [ 1703.264823][T20953] fuse: Unknown parameter 'grou00000000000000000000' [ 1703.319687][ T36] audit: type=1800 audit(4000002959.880:914): pid=20955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4879" name="bus" dev="overlay" ino=2040 res=0 errno=0 [ 1703.445753][ T36] audit: type=1326 audit(4000002959.993:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20956 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1703.445814][ T36] audit: type=1326 audit(4000002959.993:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20956 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1703.445861][ T36] audit: type=1326 audit(4000002959.993:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20956 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1703.445905][ T36] audit: type=1326 audit(4000002959.993:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20956 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1703.445951][ T36] audit: type=1326 audit(4000002959.993:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20956 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1703.445997][ T36] audit: type=1326 audit(4000002959.993:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20956 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1703.446041][ T36] audit: type=1326 audit(4000002959.993:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20956 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1703.446082][ T36] audit: type=1326 audit(4000002959.993:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20956 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1703.446124][ T36] audit: type=1326 audit(4000002959.993:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20956 comm="syz.1.4880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1704.055391][T13332] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1704.217537][T13332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.217575][T13332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.217618][T13332] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1704.217643][T13332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.269381][T13332] usb 2-1: config 0 descriptor?? [ 1704.302393][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1704.365995][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1704.646152][T20962] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1707.245122][T13332] usbhid 2-1:0.0: can't add hid device: -71 [ 1707.245267][T13332] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1707.293696][T13332] usb 2-1: USB disconnect, device number 64 [ 1707.941749][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1707.964790][T20974] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4884'. [ 1708.009234][T20976] fuse: Unknown parameter 'grou00000000000000000000' [ 1708.009664][T20976] fuse: Unknown parameter 'grou00000000000000000000' [ 1708.045118][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1708.586413][T20982] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4888'. [ 1709.487019][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1709.540029][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1709.808208][T20762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1709.826227][T20637] veth0_vlan: entered promiscuous mode [ 1709.840695][T20989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4891'. [ 1709.871163][T20641] veth0_vlan: entered promiscuous mode [ 1709.907359][T11285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.908168][T11285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1709.975969][T20637] veth1_vlan: entered promiscuous mode [ 1710.011655][T17027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.015828][T17027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1710.022092][T20641] veth1_vlan: entered promiscuous mode [ 1710.080172][T20651] veth0_vlan: entered promiscuous mode [ 1710.101206][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1710.309420][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 1710.309440][ T36] audit: type=1800 audit(4000002966.410:952): pid=21000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4893" name="bus" dev="overlay" ino=2129 res=0 errno=0 [ 1710.353450][T20651] veth1_vlan: entered promiscuous mode [ 1710.421135][T20637] veth0_macvtap: entered promiscuous mode [ 1710.470363][T20641] veth0_macvtap: entered promiscuous mode [ 1710.491451][T20637] veth1_macvtap: entered promiscuous mode [ 1710.572378][T20641] veth1_macvtap: entered promiscuous mode [ 1710.680289][ T36] audit: type=1800 audit(4000002966.765:953): pid=21005 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4894" name="bus" dev="overlay" ino=2143 res=0 errno=0 [ 1710.709482][T20637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.769516][T20641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.799674][T20651] veth0_macvtap: entered promiscuous mode [ 1710.814397][T20637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.846639][T20641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.864504][T17027] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.865654][T20651] veth1_macvtap: entered promiscuous mode [ 1710.878724][T17027] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.886123][T17027] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.902533][T17027] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.972227][T17027] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.975234][T17027] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.993863][T17027] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.097894][T17027] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1711.242443][T20651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1712.418036][T20651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.713548][T21028] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4898'. [ 1712.851644][T17020] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.899732][T17020] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.953519][T17020] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.982564][T17020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.066271][T20762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1713.157493][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.157516][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.496826][ T36] audit: type=1800 audit(4000002969.403:954): pid=21035 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4900" name="bus" dev="overlay" ino=2182 res=0 errno=0 [ 1713.503519][T17020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.503542][T17020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.675432][T11262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.675456][T11262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.789688][T17020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.789712][T17020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.249373][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.249401][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.447708][T11289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.447734][T11289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.710625][T20762] veth0_vlan: entered promiscuous mode [ 1716.889375][T20762] veth1_vlan: entered promiscuous mode [ 1716.980518][T21068] overlayfs: missing 'lowerdir' [ 1717.091620][T21074] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4905'. [ 1717.122040][T20762] veth0_macvtap: entered promiscuous mode [ 1717.152024][T20762] veth1_macvtap: entered promiscuous mode [ 1717.255077][T20762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1717.310561][T20762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1717.354214][T17020] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.357973][T17020] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.359443][T17020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.360896][T17020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.841801][ T36] audit: type=1800 audit(4000002974.379:955): pid=21081 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.4907" name="bus" dev="overlay" ino=38 res=0 errno=0 [ 1718.936493][ T48] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1719.139592][ T48] usb 9-1: Using ep0 maxpacket: 8 [ 1719.199313][ T48] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.199378][ T48] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1719.199402][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.233325][ T48] usb 9-1: config 0 descriptor?? [ 1719.284906][ T48] iowarrior 9-1:0.0: no interrupt-in endpoint found [ 1719.602956][T11285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.602981][T11285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.134124][T11285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.134151][T11285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.143230][T21105] overlayfs: missing 'lowerdir' [ 1721.420391][T21109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4917'. [ 1721.835115][ T5976] usb 9-1: USB disconnect, device number 2 [ 1722.388568][ T36] audit: type=1326 audit(4000002977.709:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21130 comm="syz.1.4923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x0 [ 1722.652638][ T36] audit: type=1800 audit(4000002977.962:957): pid=21139 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.4921" name="bus" dev="overlay" ino=82 res=0 errno=0 [ 1723.159938][T21154] overlayfs: missing 'lowerdir' [ 1724.201295][T21175] block nbd5: Device being setup by another task [ 1724.469711][ T36] audit: type=1800 audit(4000002979.655:958): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4937" name="bus" dev="overlay" ino=2274 res=0 errno=0 [ 1724.653025][T21177] syzkaller1: entered promiscuous mode [ 1724.653045][T21177] syzkaller1: entered allmulticast mode [ 1724.688105][ T5798] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1724.804876][ T5113] block nbd5: Receive control failed (result -32) [ 1724.805598][T20276] block nbd5: Receive control failed (result -32) [ 1724.850366][T21062] block nbd5: shutting down sockets [ 1724.855702][ T5798] usb 7-1: Using ep0 maxpacket: 32 [ 1726.146688][ T5798] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1726.146723][ T5798] usb 7-1: config 0 has no interface number 0 [ 1726.173704][ T5798] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1726.173726][ T5798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.173738][ T5798] usb 7-1: Product: syz [ 1726.173747][ T5798] usb 7-1: Manufacturer: syz [ 1726.173756][ T5798] usb 7-1: SerialNumber: syz [ 1726.230627][ T5798] usb 7-1: config 0 descriptor?? [ 1726.273640][ T5798] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1728.211606][T21198] overlayfs: missing 'lowerdir' [ 1728.546005][T21203] fuse: Unknown parameter 'user_id00000000000000000000' [ 1731.638639][ T5798] usb 7-1: qt2_attach - failed to power on unit: -110 [ 1731.639034][ T5798] quatech2 7-1:0.51: probe with driver quatech2 failed with error -110 [ 1733.714010][T17078] usb 7-1: USB disconnect, device number 2 [ 1733.781485][T21244] overlayfs: missing 'lowerdir' [ 1734.088356][T21249] fuse: Unknown parameter 'user_id00000000000000000000' [ 1735.674803][ T36] audit: type=1800 audit(4000002990.141:959): pid=21260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.4961" name="bus" dev="overlay" ino=68 res=0 errno=0 [ 1735.891918][T21270] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4953'. [ 1735.894453][T21265] block nbd5: Device being setup by another task [ 1736.313549][T21283] overlayfs: missing 'lowerdir' [ 1736.390111][T21261] block nbd5: shutting down sockets [ 1737.433678][T21286] binder: 21280:21286 ioctl c0306201 0 returned -14 [ 1738.395312][T21299] fuse: Bad value for 'fd' [ 1739.933677][ T36] audit: type=1800 audit(4000002994.125:960): pid=21311 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.4973" name="bus" dev="overlay" ino=147 res=0 errno=0 [ 1740.236813][T21319] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4976'. [ 1740.627777][ T5798] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1741.971770][ T5798] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1741.971812][ T5798] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1741.994435][ T5798] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1741.994468][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1741.994490][ T5798] usb 2-1: Product: syz [ 1741.994506][ T5798] usb 2-1: Manufacturer: syz [ 1741.994521][ T5798] usb 2-1: SerialNumber: syz [ 1742.028641][ T5798] usb 2-1: config 0 descriptor?? [ 1742.379298][ T5798] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1742.406392][ T5798] usb 2-1: USB disconnect, device number 65 [ 1742.514953][T21062] udevd[21062]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1742.646551][T21337] overlayfs: failed to resolve './file1': -2 [ 1745.746114][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4989'. [ 1747.722220][ T36] audit: type=1800 audit(4000003001.412:961): pid=21387 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4999" name="bus" dev="overlay" ino=2370 res=0 errno=0 [ 1750.729595][ T36] audit: type=1800 audit(4000003004.228:962): pid=21437 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.5011" name="bus" dev="overlay" ino=163 res=0 errno=0 [ 1752.633297][ T5807] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1752.799695][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.799735][ T5807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.799778][ T5807] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1752.799812][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.859840][ T5807] usb 6-1: config 0 descriptor?? [ 1754.365444][T21455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1756.396406][T17078] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1756.898923][ T5807] usbhid 6-1:0.0: can't add hid device: -71 [ 1756.899065][ T5807] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1756.933437][ T5807] usb 6-1: USB disconnect, device number 100 [ 1759.034035][ T36] audit: type=1800 audit(4000003011.992:963): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.5039" name="bus" dev="overlay" ino=183 res=0 errno=0 [ 1759.101396][T10324] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1759.874596][T10324] usb 7-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 1759.874629][T10324] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1759.878183][T10324] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1759.878214][T10324] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1759.878236][T10324] usb 7-1: Product: syz [ 1759.878251][T10324] usb 7-1: Manufacturer: syz [ 1759.878265][T10324] usb 7-1: SerialNumber: syz [ 1759.965582][T10324] usb 7-1: config 0 descriptor?? [ 1760.697261][T10324] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1760.714526][T10324] usb 7-1: USB disconnect, device number 4 [ 1761.182679][T21062] udevd[21062]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1761.842784][T21587] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5055'. [ 1761.937185][ T36] audit: type=1326 audit(4000003014.704:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.8.5051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x0 [ 1761.998379][T17078] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1762.177831][T17078] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1762.177864][T17078] usb 7-1: config 0 has no interface number 0 [ 1762.200255][T17078] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1762.200288][T17078] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.200307][T17078] usb 7-1: Product: syz [ 1762.200321][T17078] usb 7-1: Manufacturer: syz [ 1762.200334][T17078] usb 7-1: SerialNumber: syz [ 1762.227153][T17078] usb 7-1: config 0 descriptor?? [ 1762.321537][T20276] block nbd8: Receive control failed (result -32) [ 1762.328397][T20276] block nbd8: Receive control failed (result -32) [ 1762.328663][T20276] block nbd8: Receive control failed (result -32) [ 1762.520323][T21603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5060'. [ 1762.554977][T21119] block nbd8: shutting down sockets [ 1762.670969][T21583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.686594][T21583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.888544][T17078] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1762.898645][T17078] gspca_m5602: Failed to find a sensor [ 1762.898660][T17078] ALi m5602 7-1:0.88: ALi m5602 webcam failed [ 1762.907250][T17078] usb 7-1: USB disconnect, device number 5 [ 1762.930141][T13332] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1763.142691][T13332] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1763.143328][T13332] usb 2-1: not running at top speed; connect to a high speed hub [ 1763.145738][T13332] usb 2-1: config 1 has an invalid descriptor of length 162, skipping remainder of the config [ 1763.145767][T13332] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1763.149417][T13332] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 1763.149449][T13332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.149479][T13332] usb 2-1: Product: ᜫ큌⟓᫏眈一瀛揜ᅘ꿍ῖꑦ㈞峈㭄᤽䪸㍛㤉೏᱗삝햽欭泛ꆘ娴坩ꁚ즛혰䉪Ơ羓됌苌뎘踾付剭ጮ磷ꭸ곆锡茇䰛첎醅뎗粊ဿ☗췥ᘮ瘇⛔츩燐되壇֡绐ᾑ喝츱홟ﹶ亽농蠆ⷁ㛼愽㬲崙瞪飑ꅒ㩀´圎Ꮤ硵문꾼晪霫樎筴陴ꇳ希齉頒ഃጦ녾呚᳿嘤뢲䚈铞挜 [ 1763.149509][T13332] usb 2-1: Manufacturer: ᐌ [ 1763.149524][T13332] usb 2-1: SerialNumber: Ђ [ 1763.748075][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1764.331598][T21644] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5069'. [ 1765.814495][T13332] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1765.965924][T21674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5077'. [ 1766.091281][T13332] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1766.131421][T13332] usb 2-1: USB disconnect, device number 66 [ 1766.229398][T21062] udevd[21062]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1766.303438][ T31] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1766.983410][ T31] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1766.983443][ T31] usb 7-1: config 0 has no interface number 0 [ 1766.988940][ T31] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1766.988972][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.988994][ T31] usb 7-1: Product: syz [ 1766.989010][ T31] usb 7-1: Manufacturer: syz [ 1766.989025][ T31] usb 7-1: SerialNumber: syz [ 1767.118873][ T31] usb 7-1: config 0 descriptor?? [ 1767.623598][T21673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1767.704563][T21673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.014793][ T31] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1768.037988][ T31] gspca_m5602: Failed to find a sensor [ 1768.038004][ T31] ALi m5602 7-1:0.88: ALi m5602 webcam failed [ 1768.068510][ T31] usb 7-1: USB disconnect, device number 6 [ 1769.275352][T21728] input: syz0 as /devices/virtual/input/input123 [ 1769.987700][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5090'. [ 1772.161945][T21781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5102'. [ 1774.372248][T21827] input: syz0 as /devices/virtual/input/input125 [ 1774.476331][T21830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5114'. [ 1775.469655][T21845] binder: BINDER_SET_CONTEXT_MGR already set [ 1775.469667][T21845] binder: 21844:21845 ioctl 4018620d 200000004a80 returned -16 [ 1775.776070][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1776.300917][T21858] overlayfs: missing 'lowerdir' [ 1777.778421][T21889] overlayfs: failed to resolve './file0': -2 [ 1778.535425][T21911] overlayfs: missing 'lowerdir' [ 1778.622188][T10324] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1778.799703][T10324] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1778.799740][T10324] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.799762][T10324] usb 9-1: Product: syz [ 1778.799785][T10324] usb 9-1: Manufacturer: syz [ 1778.799801][T10324] usb 9-1: SerialNumber: syz [ 1780.314374][T21904] binder: BINDER_SET_CONTEXT_MGR already set [ 1780.314393][T21904] binder: 21903:21904 ioctl 4018620d 200000000040 returned -16 [ 1780.437295][T10324] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1780.437363][T10324] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1780.446980][T10324] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1780.534027][T10324] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1780.707373][T10324] usb 9-1: USB disconnect, device number 3 [ 1780.751082][T20276] block nbd6: Receive control failed (result -32) [ 1780.773747][T21939] block nbd6: shutting down sockets [ 1781.233576][T21953] overlayfs: failed to resolve './file0': -2 [ 1781.336974][T21954] input: syz0 as /devices/virtual/input/input126 [ 1782.344449][T21977] overlayfs: missing 'lowerdir' [ 1787.057099][ T5905] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1787.258219][ T5905] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1787.258321][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1787.258348][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1787.258374][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1787.258398][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1787.258445][ T5905] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1787.258469][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.314957][ T5905] usb 6-1: config 0 descriptor?? [ 1787.772082][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 1787.772223][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1787.792870][ T5905] usb 6-1: USB disconnect, device number 101 [ 1787.917745][T22038] block nbd6: Device being setup by another task [ 1787.966402][ T36] audit: type=1326 audit(4000003039.062:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22034 comm="syz.6.5166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cfa9bc799 code=0x0 [ 1788.510728][T20276] block nbd6: Receive control failed (result -32) [ 1788.512155][T20276] block nbd6: Receive control failed (result -32) [ 1788.595960][T22036] block nbd6: shutting down sockets [ 1788.831213][ T36] audit: type=1326 audit(4000003039.867:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22058 comm="syz.7.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1788.831361][ T36] audit: type=1326 audit(4000003039.867:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22058 comm="syz.7.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1788.892572][ T36] audit: type=1326 audit(4000003039.923:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22058 comm="syz.7.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1788.892623][ T36] audit: type=1326 audit(4000003039.923:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22058 comm="syz.7.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1788.892660][ T36] audit: type=1326 audit(4000003039.923:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22058 comm="syz.7.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1788.914437][ T36] audit: type=1326 audit(4000003039.941:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22058 comm="syz.7.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1788.914492][ T36] audit: type=1326 audit(4000003039.941:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22058 comm="syz.7.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1788.914532][ T36] audit: type=1326 audit(4000003039.941:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22058 comm="syz.7.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1788.917337][ T10] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1788.929165][ T36] audit: type=1326 audit(4000003039.960:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22058 comm="syz.7.5173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1789.088326][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1789.095240][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1789.095273][ T10] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1789.095299][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1789.104575][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1789.104605][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.104624][ T10] usb 6-1: Product: syz [ 1789.104638][ T10] usb 6-1: Manufacturer: syz [ 1789.104652][ T10] usb 6-1: SerialNumber: syz [ 1789.245196][ T10] usb 6-1: config 0 descriptor?? [ 1789.567159][T22065] input: syz0 as /devices/virtual/input/input127 [ 1790.906042][ T10] gs_usb 6-1:0.0: Couldn't get device config: (err=-110) [ 1790.906077][ T10] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 1792.021602][ T5905] usb 6-1: USB disconnect, device number 102 [ 1792.423770][ T5905] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1792.597525][ T5905] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1792.597607][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1792.597635][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1792.597663][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1792.597685][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1792.597732][ T5905] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1792.597757][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.607621][ T5905] usb 6-1: config 0 descriptor?? [ 1793.065653][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 1793.065804][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1793.119502][ T5905] usb 6-1: USB disconnect, device number 103 [ 1793.255527][T22115] binder: BINDER_SET_CONTEXT_MGR already set [ 1793.255540][T22115] binder: 22114:22115 ioctl 4018620d 200000004a80 returned -16 [ 1793.650473][ T36] kauditd_printk_skb: 76 callbacks suppressed [ 1793.650494][ T36] audit: type=1326 audit(4000003044.375:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22118 comm="syz.1.5187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x0 [ 1793.762100][ T5810] block nbd1: Receive control failed (result -32) [ 1793.788537][T20276] block nbd1: Receive control failed (result -32) [ 1793.788689][T20302] block nbd1: Receive control failed (result -32) [ 1793.791542][T22119] block nbd1: shutting down sockets [ 1794.417005][T20276] Bluetooth: hci5: command 0x0406 tx timeout [ 1794.506705][ T36] audit: type=1326 audit(4000003045.170:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22147 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1794.531503][ T36] audit: type=1326 audit(4000003045.208:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22147 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1794.537049][ T36] audit: type=1326 audit(4000003045.208:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22147 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1794.537202][ T36] audit: type=1326 audit(4000003045.208:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22147 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1794.537361][ T36] audit: type=1326 audit(4000003045.208:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22147 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1794.537968][ T36] audit: type=1326 audit(4000003045.208:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22147 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1794.538388][ T36] audit: type=1326 audit(4000003045.208:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22147 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1794.538535][ T36] audit: type=1326 audit(4000003045.208:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22147 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1794.538909][ T36] audit: type=1326 audit(4000003045.208:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22147 comm="syz.1.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1794.806456][ T5905] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1794.990994][ T5905] usb 9-1: Using ep0 maxpacket: 32 [ 1794.995164][ T5905] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1794.995194][ T5905] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1794.995219][ T5905] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1795.001639][ T5905] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1795.001669][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.001688][ T5905] usb 9-1: Product: syz [ 1795.001702][ T5905] usb 9-1: Manufacturer: syz [ 1795.001715][ T5905] usb 9-1: SerialNumber: syz [ 1795.013099][ T5905] usb 9-1: config 0 descriptor?? [ 1796.465370][ T5905] gs_usb 9-1:0.0: Couldn't get device config: (err=-110) [ 1796.465423][ T5905] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 1797.010169][ T5905] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1797.185848][ T5905] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1797.185915][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1797.185945][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1797.185973][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1797.185997][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1797.186044][ T5905] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1797.186070][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.221608][ T5905] usb 6-1: config 0 descriptor?? [ 1797.425968][T22203] input: syz0 as /devices/virtual/input/input128 [ 1799.228691][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 1799.232229][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1799.320952][ T5798] usb 9-1: USB disconnect, device number 4 [ 1799.400714][ T5905] usb 6-1: USB disconnect, device number 104 [ 1800.714814][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 1800.714836][ T36] audit: type=1326 audit(4000003050.979:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.762578][ T36] audit: type=1326 audit(4000003051.035:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.762688][ T36] audit: type=1326 audit(4000003051.035:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.762939][ T36] audit: type=1326 audit(4000003051.035:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.763517][ T36] audit: type=1326 audit(4000003051.035:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.763765][ T36] audit: type=1326 audit(4000003051.035:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.764548][ T36] audit: type=1326 audit(4000003051.035:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.764596][ T36] audit: type=1326 audit(4000003051.035:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.765165][ T36] audit: type=1326 audit(4000003051.035:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.765625][ T36] audit: type=1326 audit(4000003051.035:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22228 comm="syz.7.5210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x7ffc0000 [ 1800.921221][T20302] Bluetooth: hci6: command 0x0406 tx timeout [ 1800.921286][ T5810] Bluetooth: hci7: command 0x0406 tx timeout [ 1801.644410][T22241] block nbd5: Device being setup by another task [ 1803.172987][T20276] block nbd5: Receive control failed (result -32) [ 1803.351800][T22247] block nbd5: shutting down sockets [ 1803.734423][ T5807] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1803.894735][ T5807] usb 9-1: Using ep0 maxpacket: 32 [ 1803.898002][ T5807] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1803.898035][ T5807] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1803.898061][ T5807] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1803.900757][ T5807] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1803.900787][ T5807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.900816][ T5807] usb 9-1: Product: syz [ 1803.900832][ T5807] usb 9-1: Manufacturer: syz [ 1803.900847][ T5807] usb 9-1: SerialNumber: syz [ 1803.968963][T17078] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1803.999837][ T5807] usb 9-1: config 0 descriptor?? [ 1804.144007][T17078] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1804.144172][T17078] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1804.144203][T17078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1804.144231][T17078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1804.144312][T17078] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1804.144360][T17078] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1804.144385][T17078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.246582][T17078] usb 6-1: config 0 descriptor?? [ 1804.760271][T22280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1804.922080][T17078] usbhid 6-1:0.0: can't add hid device: -71 [ 1804.926224][T17078] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1804.956962][T17078] usb 6-1: USB disconnect, device number 105 [ 1805.517652][ T5807] gs_usb 9-1:0.0: Couldn't get device config: (err=-110) [ 1805.517706][ T5807] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 1805.928447][T22294] overlayfs: missing 'lowerdir' [ 1806.067469][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 1806.067492][ T36] audit: type=1326 audit(4000003055.993:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1806.067598][ T36] audit: type=1326 audit(4000003055.993:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1806.068014][ T36] audit: type=1326 audit(4000003055.993:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1806.069130][ T36] audit: type=1326 audit(4000003055.993:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1806.069181][ T36] audit: type=1326 audit(4000003055.993:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1806.069400][ T36] audit: type=1326 audit(4000003055.993:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1806.340668][ T36] audit: type=1326 audit(4000003056.002:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1806.340738][ T36] audit: type=1326 audit(4000003056.180:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1806.340786][ T36] audit: type=1326 audit(4000003056.180:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1807.737680][ T36] audit: type=1326 audit(4000003057.546:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22297 comm="syz.1.5226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa695e8c799 code=0x7ffc0000 [ 1807.856062][T17078] usb 9-1: USB disconnect, device number 5 [ 1808.042763][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1808.224508][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 1808.227329][ T31] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 1808.227362][ T31] usb 7-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 1808.227413][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1808.227461][ T31] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1808.227485][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.294468][ T31] usb 7-1: config 0 descriptor?? [ 1808.387841][ T31] pxrc 7-1:0.0: Could not find endpoint [ 1808.389442][ T31] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1808.535084][ T1849] usb 7-1: USB disconnect, device number 7 [ 1809.786715][T22336] overlayfs: missing 'lowerdir' [ 1811.836936][ T5113] Bluetooth: hci1: command 0x0406 tx timeout [ 1813.778069][T22372] binder_alloc: 22371: binder_alloc_buf, no vma [ 1814.638969][ T5905] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1814.810108][ T5905] usb 9-1: Using ep0 maxpacket: 8 [ 1814.812539][ T5905] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1814.812601][ T5905] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1814.812626][ T5905] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1814.812653][ T5905] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1814.812678][ T5905] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1814.812725][ T5905] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1814.812751][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.179221][ T5905] usb 9-1: usb_control_msg returned -32 [ 1815.179278][ T5905] usbtmc 9-1:16.0: can't read capabilities [ 1815.611404][T22390] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1815.623124][ T31] usb 9-1: USB disconnect, device number 6 [ 1817.685819][T22404] overlayfs: missing 'lowerdir' [ 1818.725342][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5260'. [ 1818.821620][T10324] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1818.981023][T10324] usb 7-1: Using ep0 maxpacket: 32 [ 1818.986860][T10324] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1818.986895][T10324] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1818.986921][T10324] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1819.036819][T10324] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1819.036854][T10324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.036875][T10324] usb 7-1: Product: syz [ 1819.036890][T10324] usb 7-1: Manufacturer: syz [ 1819.036906][T10324] usb 7-1: SerialNumber: syz [ 1819.069594][T10324] usb 7-1: config 0 descriptor?? [ 1819.267199][T22431] binder_alloc: 22430: binder_alloc_buf, no vma [ 1821.066107][T10324] gs_usb 7-1:0.0: Couldn't get device config: (err=-110) [ 1821.066159][T10324] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 1821.138734][ T5905] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1821.315113][ T5905] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1821.315151][ T5905] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1821.315194][ T5905] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1821.315218][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.336433][ T5905] usb 9-1: config 0 descriptor?? [ 1821.676819][T22446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1823.508097][ T5807] usb 7-1: USB disconnect, device number 8 [ 1823.788605][ T5905] usbhid 9-1:0.0: can't add hid device: -71 [ 1823.788744][ T5905] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1823.806731][ T5905] usb 9-1: USB disconnect, device number 7 [ 1825.363480][T22460] overlayfs: failed to resolve './file0': -2 [ 1825.447089][T17078] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1825.622410][T17078] usb 7-1: Using ep0 maxpacket: 8 [ 1825.638566][T17078] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1825.638601][T17078] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.638624][T17078] usb 7-1: Product: syz [ 1825.638639][T17078] usb 7-1: Manufacturer: syz [ 1825.638653][T17078] usb 7-1: SerialNumber: syz [ 1825.691237][T17078] usb 7-1: config 0 descriptor?? [ 1825.713824][T22464] overlayfs: missing 'lowerdir' [ 1825.929686][T17078] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1826.024692][T17078] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1826.067250][T17078] usb 7-1: USB disconnect, device number 9 [ 1826.137185][T22474] binder_alloc: 22473: binder_alloc_buf, no vma [ 1826.257948][T22479] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5271'. [ 1827.232423][ T5807] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1827.418318][ T5807] usb 6-1: Using ep0 maxpacket: 32 [ 1827.420973][ T5807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1827.421004][ T5807] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1827.421030][ T5807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1827.424251][ T5807] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1827.424280][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.424302][ T5807] usb 6-1: Product: syz [ 1827.424317][ T5807] usb 6-1: Manufacturer: syz [ 1827.424333][ T5807] usb 6-1: SerialNumber: syz [ 1827.586308][ T5807] usb 6-1: config 0 descriptor?? [ 1828.777297][ T5807] gs_usb 6-1:0.0: Couldn't send data format (err=-110) [ 1828.777646][ T5807] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 1829.095238][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 1829.095261][ T36] audit: type=1326 audit(4000003077.451:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22508 comm="syz.6.5277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cfa9bc799 code=0x0 [ 1829.265016][T22521] overlayfs: missing 'lowerdir' [ 1829.270949][T22519] overlayfs: failed to resolve './file0': -2 [ 1829.618045][T22531] binder_alloc: 22530: binder_alloc_buf, no vma [ 1829.965813][ T36] audit: type=1326 audit(4000003078.340:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22529 comm="syz.1.5285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa695e8c799 code=0x0 [ 1830.072770][ T5113] block nbd1: Receive control failed (result -32) [ 1830.085073][T20276] block nbd1: Receive control failed (result -32) [ 1830.089608][T22534] block nbd1: shutting down sockets [ 1830.402100][ T36] audit: type=1326 audit(4000003078.751:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22543 comm="syz.8.5287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x0 [ 1830.556781][T10324] usb 6-1: USB disconnect, device number 106 [ 1831.061117][T20276] block nbd8: Receive control failed (result -32) [ 1831.068915][ T5113] block nbd8: Receive control failed (result -32) [ 1831.069138][ T5810] block nbd8: Receive control failed (result -32) [ 1831.070570][T22544] block nbd8: shutting down sockets [ 1831.093052][T22557] fuse: Unknown parameter 'user_i00000000000000000000' [ 1832.429136][T22563] overlayfs: failed to resolve './file1': -2 [ 1832.784800][T22574] autofs: Unknown parameter '0x0000000000000000' [ 1833.863835][T22578] overlayfs: missing 'lowerdir' [ 1834.254406][T22585] binder: BINDER_SET_CONTEXT_MGR already set [ 1834.254424][T22585] binder: 22583:22585 ioctl 4018620d 200000004a80 returned -16 [ 1834.495765][ T36] audit: type=1326 audit(4000003082.586:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22584 comm="syz.8.5298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x0 [ 1834.601577][ T5113] block nbd8: Receive control failed (result -32) [ 1834.610975][ T5810] block nbd8: Receive control failed (result -32) [ 1834.644187][T22602] fuse: Unknown parameter 'user_id00000000000000000000' [ 1834.659667][T22591] block nbd8: shutting down sockets [ 1834.706700][T22605] overlayfs: failed to resolve './file1': -2 [ 1836.276666][ T10] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1836.454128][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1836.462522][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1836.462551][ T10] usb 6-1: config 0 has no interface number 0 [ 1836.465696][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1836.465723][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.465742][ T10] usb 6-1: Product: syz [ 1836.465755][ T10] usb 6-1: Manufacturer: syz [ 1836.465769][ T10] usb 6-1: SerialNumber: syz [ 1836.482275][ T10] usb 6-1: config 0 descriptor?? [ 1836.971178][T22613] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1837.003976][T22640] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1837.004277][T22640] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1837.025210][T22638] binder: BINDER_SET_CONTEXT_MGR already set [ 1837.025227][T22638] binder: 22637:22638 ioctl 4018620d 200000004a80 returned -16 [ 1837.067890][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1837.068019][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1837.717290][T22653] fuse: Unknown parameter 'user_id00000000000000000000' [ 1838.002622][T22659] overlayfs: failed to resolve './file1': -2 [ 1840.056379][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61 [ 1840.056757][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 1840.451237][T13332] usb 6-1: USB disconnect, device number 107 [ 1840.658199][T22682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1840.658255][T22682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1840.833319][ T36] audit: type=1326 audit(4000003088.517:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22673 comm="syz.6.5319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cfa9bc799 code=0x0 [ 1840.874309][T22687] fuse: Unknown parameter 'user_id00000000000000000000' [ 1840.892651][T22688] binder: BINDER_SET_CONTEXT_MGR already set [ 1840.892667][T22688] binder: 22686:22688 ioctl 4018620d 200000004a80 returned -16 [ 1840.981376][ T5113] block nbd6: Receive control failed (result -32) [ 1840.991276][ T5810] block nbd6: Receive control failed (result -32) [ 1841.054673][T21062] block nbd6: shutting down sockets [ 1843.120589][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1844.972660][ T5810] block nbd7: Receive control failed (result -32) [ 1844.986291][ T5810] block nbd7: Receive control failed (result -32) [ 1845.087070][T22698] block nbd7: shutting down sockets [ 1845.135129][T22710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5331'. [ 1847.534367][T22734] fuse: Bad value for 'fd' [ 1850.341714][T22765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5344'. [ 1850.660392][ T5113] block nbd6: Receive control failed (result -32) [ 1850.660890][ T5810] block nbd6: Receive control failed (result -32) [ 1850.662203][T22754] block nbd6: shutting down sockets [ 1856.100971][T17078] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1856.278786][T17078] usb 9-1: Using ep0 maxpacket: 16 [ 1856.283406][T17078] usb 9-1: config index 0 descriptor too short (expected 65, got 36) [ 1856.283489][T17078] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1856.283517][T17078] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1856.283542][T17078] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1856.283564][T17078] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1856.283607][T17078] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1856.283630][T17078] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.293485][T17078] usb 9-1: config 0 descriptor?? [ 1856.338463][T17078] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input129 [ 1856.347735][ T5148] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1856.596939][ T5148] pxrc 9-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1856.681621][T17078] usb 9-1: USB disconnect, device number 8 [ 1858.081708][T22822] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5358'. [ 1858.265715][T22819] block nbd1: Device being setup by another task [ 1858.427589][T17078] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1858.605442][T17078] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1858.605507][T17078] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1858.605534][T17078] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1858.605561][T17078] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1858.605583][T17078] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1858.605628][T17078] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1858.605651][T17078] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.740085][T17078] usb 9-1: config 0 descriptor?? [ 1860.492694][ T5810] block nbd1: Receive control failed (result -32) [ 1860.578639][T17078] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd [ 1860.578679][T17078] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1860.578707][T17078] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1860.578734][T17078] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1860.578758][T17078] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1860.578782][T17078] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 1860.677204][T22820] block nbd1: shutting down sockets [ 1860.726077][T17078] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1860.803373][T17078] usb 9-1: USB disconnect, device number 9 [ 1861.118057][T22858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1861.138424][T22859] binder: BINDER_SET_CONTEXT_MGR already set [ 1861.138442][T22859] binder: 22857:22859 ioctl 4018620d 200000004a80 returned -16 [ 1861.174123][T22846] fido_id[22846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1864.123303][T22895] binder: BINDER_SET_CONTEXT_MGR already set [ 1864.123321][T22895] binder: 22893:22895 ioctl 4018620d 200000004a80 returned -16 [ 1870.121225][ T36] audit: type=1326 audit(4000003115.905:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1870.151744][ T36] audit: type=1326 audit(4000003115.933:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1870.178153][ T36] audit: type=1326 audit(4000003115.961:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1870.178299][ T36] audit: type=1326 audit(4000003115.961:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1870.178459][ T36] audit: type=1326 audit(4000003115.961:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1870.179088][ T36] audit: type=1326 audit(4000003115.961:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1870.179148][ T36] audit: type=1326 audit(4000003115.961:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1870.179883][ T36] audit: type=1326 audit(4000003115.961:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1870.179930][ T36] audit: type=1326 audit(4000003115.961:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1870.180400][ T36] audit: type=1326 audit(4000003115.961:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22963 comm="syz.5.5393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1872.663014][T22981] block nbd5: Device being setup by another task [ 1873.271275][ T5810] block nbd5: Receive control failed (result -32) [ 1873.376146][T22982] block nbd5: shutting down sockets [ 1881.024404][ T5810] block nbd1: Receive control failed (result -32) [ 1881.025601][T23038] block nbd1: shutting down sockets [ 1886.826628][T23108] block nbd7: server does not support multiple connections per device. [ 1886.827779][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 1886.827797][ T36] audit: type=1326 audit(4000003131.536:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23101 comm="syz.7.5457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x0 [ 1886.881617][T23102] block nbd7: shutting down sockets [ 1887.175799][ T36] audit: type=1326 audit(4000003131.863:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23113 comm="syz.7.5462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x0 [ 1887.293995][ T5810] block nbd7: Receive control failed (result -32) [ 1887.298449][T23117] block nbd7: shutting down sockets [ 1887.464190][ T36] audit: type=1326 audit(4000003132.134:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23121 comm="syz.8.5465" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x0 [ 1887.586520][ T5810] block nbd8: Receive control failed (result -32) [ 1887.586612][ T5113] block nbd8: Receive control failed (result -32) [ 1887.587847][T23125] block nbd8: shutting down sockets [ 1890.503161][T23170] fuse: Unknown parameter 'fd0x0000000000000004' [ 1890.519604][ T36] audit: type=1326 audit(4000003134.987:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23162 comm="syz.7.5482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x0 [ 1890.644882][ T5810] block nbd7: Receive control failed (result -32) [ 1890.711340][T23168] block nbd7: shutting down sockets [ 1891.052101][T23187] fuse: Unknown parameter 'use00000000000000000000' [ 1891.269956][ T1849] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1892.894505][ T1849] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1892.894538][ T1849] usb 2-1: config 0 has no interface number 0 [ 1892.898615][ T1849] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1892.898649][ T1849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.898671][ T1849] usb 2-1: Product: syz [ 1892.898686][ T1849] usb 2-1: Manufacturer: syz [ 1892.898701][ T1849] usb 2-1: SerialNumber: syz [ 1892.967912][ T1849] usb 2-1: config 0 descriptor?? [ 1893.064637][ T5810] block nbd5: Receive control failed (result -32) [ 1893.089176][ T5810] block nbd5: Receive control failed (result -32) [ 1893.130574][T23201] block nbd5: shutting down sockets [ 1893.404379][T23183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.405063][T23183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.557069][ T1849] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1893.561065][ T1849] gspca_m5602: Failed to find a sensor [ 1893.561082][ T1849] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 1893.607051][ T1849] usb 2-1: USB disconnect, device number 67 [ 1893.654602][ T36] audit: type=1326 audit(4000003137.925:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23211 comm="syz.5.5504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x0 [ 1893.772359][ T5810] block nbd5: Receive control failed (result -32) [ 1893.775148][T23215] block nbd5: shutting down sockets [ 1894.615420][ T5798] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1894.658164][ T36] audit: type=1326 audit(4000003138.841:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23236 comm="syz.8.5514" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x0 [ 1894.751765][ T5113] block nbd8: Receive control failed (result -32) [ 1894.755148][ T5810] block nbd8: Receive control failed (result -32) [ 1894.759405][T23237] block nbd8: shutting down sockets [ 1894.778617][ T5798] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1894.778650][ T5798] usb 2-1: config 1 has an invalid descriptor of length 197, skipping remainder of the config [ 1894.778670][ T5798] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1894.778719][ T5798] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1894.780594][ T5798] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1894.780623][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1894.780645][ T5798] usb 2-1: Product: syz [ 1894.780659][ T5798] usb 2-1: Manufacturer: syz [ 1900.988477][ T5798] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1901.341849][ T5798] usb 2-1: USB disconnect, device number 68 [ 1901.559922][T23302] overlayfs: missing 'lowerdir' [ 1902.678450][ T36] audit: type=1326 audit(4000003146.362:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23315 comm="syz.5.5546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x0 [ 1902.958175][ T5877] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1903.126133][ T5877] usb 2-1: Using ep0 maxpacket: 8 [ 1903.133533][ T5877] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1903.133567][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.133588][ T5877] usb 2-1: Product: syz [ 1903.133603][ T5877] usb 2-1: Manufacturer: syz [ 1903.133618][ T5877] usb 2-1: SerialNumber: syz [ 1903.193159][ T5877] usb 2-1: config 0 descriptor?? [ 1903.316174][T23320] block nbd5: shutting down sockets [ 1903.492005][ T5877] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 1903.492113][ T5877] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1903.536893][ T5877] usb 2-1: USB disconnect, device number 69 [ 1904.135417][T23349] binder: 23347:23349 ioctl 4018620d 0 returned -22 [ 1904.889064][ T5798] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1905.028188][ T5798] usb 2-1: device descriptor read/64, error -71 [ 1905.295244][ T5798] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1905.397310][T23392] binder: 23391:23392 ioctl 4018620d 0 returned -22 [ 1905.434201][ T5798] usb 2-1: device descriptor read/64, error -71 [ 1905.552828][ T5798] usb usb2-port1: attempt power cycle [ 1905.638959][ T36] audit: type=1326 audit(4000003149.121:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1905.639017][ T36] audit: type=1326 audit(4000003149.121:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1905.639063][ T36] audit: type=1326 audit(4000003149.131:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1905.639107][ T36] audit: type=1326 audit(4000003149.131:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1905.639152][ T36] audit: type=1326 audit(4000003149.131:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1905.639204][ T36] audit: type=1326 audit(4000003149.131:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1905.643570][ T36] audit: type=1326 audit(4000003149.131:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1905.643627][ T36] audit: type=1326 audit(4000003149.131:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1905.643670][ T36] audit: type=1326 audit(4000003149.131:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23401 comm="syz.5.5586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1905.917053][ T5798] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1905.937655][ T5798] usb 2-1: device descriptor read/8, error -71 [ 1906.193437][ T5798] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1906.216404][ T5798] usb 2-1: device descriptor read/8, error -71 [ 1906.332456][ T5798] usb usb2-port1: unable to enumerate USB device [ 1907.657878][ T10] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1907.870659][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1907.870695][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1907.870716][ T10] usb 6-1: Product: syz [ 1907.870732][ T10] usb 6-1: Manufacturer: syz [ 1907.870747][ T10] usb 6-1: SerialNumber: syz [ 1908.038044][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 1908.038065][ T36] audit: type=1326 audit(4000003151.376:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.038175][ T36] audit: type=1326 audit(4000003151.376:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.041704][ T36] audit: type=1326 audit(4000003151.376:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.041759][ T36] audit: type=1326 audit(4000003151.376:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.041868][ T36] audit: type=1326 audit(4000003151.376:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.042200][ T36] audit: type=1326 audit(4000003151.376:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.092201][ T36] audit: type=1326 audit(4000003151.376:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.092257][ T36] audit: type=1326 audit(4000003151.422:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.092375][ T36] audit: type=1326 audit(4000003151.422:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.145854][T23485] overlayfs: failed to resolve './file1': -2 [ 1908.233584][ T36] audit: type=1326 audit(4000003151.497:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23477 comm="syz.8.5623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c395c799 code=0x7ffc0000 [ 1908.645391][T17078] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1908.805874][T17078] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1908.805909][T17078] usb 2-1: config 1 has an invalid descriptor of length 197, skipping remainder of the config [ 1908.805931][T17078] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1908.805982][T17078] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1908.808498][T17078] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1908.808527][T17078] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1908.808549][T17078] usb 2-1: Product: syz [ 1908.808565][T17078] usb 2-1: Manufacturer: syz [ 1909.264390][T23460] binder: BINDER_SET_CONTEXT_MGR already set [ 1909.264410][T23460] binder: 23459:23460 ioctl 4018620d 200000000040 returned -16 [ 1909.304888][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1909.305082][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1909.309484][ T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1909.380472][ T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1909.418035][ T10] usb 6-1: USB disconnect, device number 108 [ 1910.020971][T23521] block nbd8: server does not support multiple connections per device. [ 1910.022883][T23517] block nbd8: shutting down sockets [ 1910.962198][ T5807] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1911.100924][ T5807] usb 6-1: device descriptor read/64, error -71 [ 1911.357516][ T5807] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1911.516927][ T5807] usb 6-1: device descriptor read/64, error -71 [ 1911.550022][T13332] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1911.632230][ T5807] usb usb6-port1: attempt power cycle [ 1911.731512][T13332] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1911.758643][T13332] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1911.758689][T13332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1911.758944][T13332] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1911.758970][T13332] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1911.759020][T13332] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1911.760149][T13332] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.864201][T13332] usb 9-1: config 0 descriptor?? [ 1912.031674][ T5807] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1912.054533][ T5807] usb 6-1: device descriptor read/8, error -71 [ 1912.331361][ T5807] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1912.357163][ T5807] usb 6-1: device descriptor read/8, error -71 [ 1912.460926][T13332] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 1912.469874][ T5807] usb usb6-port1: unable to enumerate USB device [ 1912.619866][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1912.811593][T13332] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1912.932229][T13332] usb 9-1: USB disconnect, device number 10 [ 1913.006984][T23570] fido_id[23570]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1913.300594][T17078] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1913.321858][T17078] usb 2-1: USB disconnect, device number 74 [ 1913.826432][T23592] binder: BINDER_SET_CONTEXT_MGR already set [ 1913.826452][T23592] binder: 23591:23592 ioctl 4018620d 200000004a80 returned -16 [ 1913.837253][T17078] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1914.004057][T17078] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1914.004093][T17078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.004116][T17078] usb 2-1: Product: syz [ 1914.004131][T17078] usb 2-1: Manufacturer: syz [ 1914.004145][T17078] usb 2-1: SerialNumber: syz [ 1914.042773][ T36] audit: type=1326 audit(4000003156.997:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.042946][ T36] audit: type=1326 audit(4000003156.997:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.082903][ T36] audit: type=1326 audit(4000003157.016:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.082963][ T36] audit: type=1326 audit(4000003157.016:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.083009][ T36] audit: type=1326 audit(4000003157.016:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.083054][ T36] audit: type=1326 audit(4000003157.016:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.083097][ T36] audit: type=1326 audit(4000003157.016:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.083138][ T36] audit: type=1326 audit(4000003157.016:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.083182][ T36] audit: type=1326 audit(4000003157.016:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.083225][ T36] audit: type=1326 audit(4000003157.025:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23599 comm="syz.5.5678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1914.171063][ T5113] block nbd7: Receive control failed (result -32) [ 1914.186995][T23574] block nbd7: shutting down sockets [ 1914.223222][ T31] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1914.409982][ T31] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1914.410029][ T31] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1914.410045][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1914.410060][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1914.410587][ T31] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1914.410617][ T31] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1914.410631][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.488550][ T31] usb 9-1: config 0 descriptor?? [ 1915.031574][ T31] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd [ 1915.329760][ T31] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1915.420853][T23582] binder: BINDER_SET_CONTEXT_MGR already set [ 1915.420871][T23582] binder: 23581:23582 ioctl 4018620d 200000000040 returned -16 [ 1915.435343][ T31] usb 9-1: USB disconnect, device number 11 [ 1915.468998][T17078] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1915.469063][T17078] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1915.507098][T17078] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1915.546715][T17078] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1915.629392][T23620] fido_id[23620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1915.643919][T17078] usb 2-1: USB disconnect, device number 75 [ 1916.531210][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1916.696445][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.696484][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.696526][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1916.696552][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.747937][ T10] usb 2-1: config 0 descriptor?? [ 1916.916052][T23651] overlayfs: missing 'workdir' [ 1917.205403][T23658] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1919.941762][ T5877] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1920.234387][ T5877] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1920.237627][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.237657][ T5877] usb 9-1: Product: syz [ 1920.237672][ T5877] usb 9-1: Manufacturer: syz [ 1920.237698][ T5877] usb 9-1: SerialNumber: syz [ 1920.459357][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 1920.459379][ T36] audit: type=1326 audit(4000003162.993:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23673 comm="syz.7.5707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d1d40c799 code=0x0 [ 1920.512331][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1920.512724][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1920.545709][ T10] usb 2-1: USB disconnect, device number 76 [ 1920.583568][ T5113] block nbd7: Receive control failed (result -32) [ 1920.624518][T23674] block nbd7: shutting down sockets [ 1921.457788][T23694] overlayfs: missing 'workdir' [ 1921.675538][T23699] input: syz0 as /devices/virtual/input/input132 [ 1921.817990][T23664] binder: BINDER_SET_CONTEXT_MGR already set [ 1921.818009][T23664] binder: 23663:23664 ioctl 4018620d 200000000040 returned -16 [ 1921.842139][ T5877] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1921.842196][ T5877] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1921.842979][ T5877] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1921.878283][ T5877] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1921.938427][ T5877] usb 9-1: USB disconnect, device number 12 [ 1922.315563][T17078] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1922.475093][ T31] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 1922.495064][T17078] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1922.495084][T17078] usb 2-1: config 0 has no interface number 0 [ 1922.507858][T17078] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1922.507889][T17078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.507909][T17078] usb 2-1: Product: syz [ 1922.507923][T17078] usb 2-1: Manufacturer: syz [ 1922.507937][T17078] usb 2-1: SerialNumber: syz [ 1922.526045][T17078] usb 2-1: config 0 descriptor?? [ 1922.648967][ T31] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 256, setting to 64 [ 1922.648993][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1922.652833][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1922.652898][ T31] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1922.652912][ T31] usb 6-1: Product: syz [ 1922.652921][ T31] usb 6-1: Manufacturer: syz [ 1922.652929][ T31] usb 6-1: SerialNumber: syz [ 1922.987485][ T31] usb 6-1: config 0 descriptor?? [ 1922.998172][T23703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.018053][T23703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.151712][ T31] usb 6-1: selecting invalid altsetting 0 [ 1923.402121][T17078] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1923.440255][T17078] gspca_m5602: Failed to find a sensor [ 1923.440272][T17078] ALi m5602 2-1:0.88: ALi m5602 webcam failed [ 1923.498060][T17078] usb 2-1: USB disconnect, device number 77 [ 1924.004788][ T31] usb 6-1: USB disconnect, device number 113 [ 1926.014192][ T36] audit: type=1326 audit(4000003168.185:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23745 comm="syz.6.5737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cfa9bc799 code=0x0 [ 1926.210670][T23752] overlayfs: missing 'lowerdir' [ 1926.943739][T17078] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 1927.109304][T17078] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 256, setting to 64 [ 1927.109330][T17078] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1927.113650][T17078] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1927.113673][T17078] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1927.113685][T17078] usb 6-1: Product: syz [ 1927.113694][T17078] usb 6-1: Manufacturer: syz [ 1927.113703][T17078] usb 6-1: SerialNumber: syz [ 1927.183542][T17078] usb 6-1: config 0 descriptor?? [ 1927.211681][T17078] usb 6-1: selecting invalid altsetting 0 [ 1927.458164][T17078] usb 6-1: USB disconnect, device number 114 [ 1927.650284][T21428] udevd[21428]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1927.719971][T23779] input: syz0 as /devices/virtual/input/input135 [ 1928.631058][ T36] audit: type=1326 audit(4000003170.635:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23789 comm="syz.5.5752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x0 [ 1928.740023][ T5810] block nbd5: Receive control failed (result -32) [ 1928.745475][ T5113] block nbd5: Receive control failed (result -32) [ 1928.746173][T23790] block nbd5: shutting down sockets [ 1929.738671][ T36] audit: type=1326 audit(4000003171.674:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23809 comm="syz.5.5761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x0 [ 1930.061007][ T5113] block nbd5: Receive control failed (result -32) [ 1930.164691][T23810] block nbd5: shutting down sockets [ 1931.013534][T23839] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1931.013571][T23839] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1931.013617][T23839] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1931.277132][ T36] audit: type=1326 audit(4000003173.114:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.280608][ T36] audit: type=1326 audit(4000003173.114:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.280666][ T36] audit: type=1326 audit(4000003173.114:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.280717][ T36] audit: type=1326 audit(4000003173.114:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.282627][ T36] audit: type=1326 audit(4000003173.114:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.282685][ T36] audit: type=1326 audit(4000003173.114:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.282733][ T36] audit: type=1326 audit(4000003173.114:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.434183][ T5905] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1931.455593][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 1931.455614][ T36] audit: type=1326 audit(4000003173.283:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.455665][ T36] audit: type=1326 audit(4000003173.283:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.455708][ T36] audit: type=1326 audit(4000003173.283:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.481306][ T36] audit: type=1326 audit(4000003173.292:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a7f71cfce code=0x7ffc0000 [ 1931.481362][ T36] audit: type=1326 audit(4000003173.292:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1a7f75da97 code=0x7ffc0000 [ 1931.481403][ T36] audit: type=1326 audit(4000003173.292:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.481442][ T36] audit: type=1326 audit(4000003173.292:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1a7f75da97 code=0x7ffc0000 [ 1931.481481][ T36] audit: type=1326 audit(4000003173.292:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1a7f71cfce code=0x7ffc0000 [ 1931.481521][ T36] audit: type=1326 audit(4000003173.292:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.494141][ T36] audit: type=1326 audit(4000003173.311:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23851 comm="syz.5.5780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1a7f75c799 code=0x7ffc0000 [ 1931.612581][ T5905] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 1931.612610][ T5905] usb 9-1: config 0 has no interface number 0 [ 1931.625810][ T5905] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83 [ 1931.625842][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.625863][ T5905] usb 9-1: Product: syz [ 1931.625878][ T5905] usb 9-1: Manufacturer: syz [ 1931.625893][ T5905] usb 9-1: SerialNumber: syz [ 1931.645724][ T5905] usb 9-1: config 0 descriptor?? [ 1931.741582][T23855] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5780'. [ 1932.105943][T23844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.126079][T23844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.409580][ T5905] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1932.418275][ T5905] gspca_m5602: Failed to find a sensor [ 1932.418290][ T5905] ALi m5602 9-1:0.88: ALi m5602 webcam failed [ 1932.449991][ T5905] usb 9-1: USB disconnect, device number 13 [ 1933.400832][ T5810] block nbd5: Receive control failed (result -32) [ 1933.401552][T23872] block nbd5: shutting down sockets [ 1935.879522][T23894] block nbd7: shutting down sockets [ 1937.153388][T10324] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1937.299605][T23927] ================================================================== [ 1937.299642][T23927] BUG: KASAN: slab-out-of-bounds in blk_mq_free_rqs+0xea/0x680 [ 1937.299776][T23927] Read of size 8 at addr ffff888026af5ac8 by task syz.7.5807/23927 [ 1937.299797][T23927] [ 1937.299814][T23927] CPU: 1 UID: 0 PID: 23927 Comm: syz.7.5807 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1937.299843][T23927] Tainted: [L]=SOFTLOCKUP [ 1937.299852][T23927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1937.299865][T23927] Call Trace: [ 1937.299874][T23927] [ 1937.299883][T23927] dump_stack_lvl+0xe8/0x150 [ 1937.299919][T23927] print_report+0xba/0x230 [ 1937.299957][T23927] ? blk_mq_free_rqs+0xea/0x680 [ 1937.299982][T23927] kasan_report+0x117/0x150 [ 1937.300012][T23927] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1937.300046][T23927] ? blk_mq_free_rqs+0xea/0x680 [ 1937.300074][T23927] blk_mq_free_rqs+0xea/0x680 [ 1937.300102][T23927] blk_mq_free_map_and_rqs+0x40/0xf0 [ 1937.300129][T23927] blk_mq_free_sched_res+0xeb/0x280 [ 1937.300182][T23927] elevator_change_done+0x1d2/0x5f0 [ 1937.300230][T23927] ? __pfx_elevator_change_done+0x10/0x10 [ 1937.300255][T23927] ? elevator_change+0x2e0/0x450 [ 1937.300280][T23927] elevator_change+0x321/0x450 [ 1937.300307][T23927] elevator_set_none+0xb5/0x140 [ 1937.300331][T23927] ? __pfx_elevator_set_none+0x10/0x10 [ 1937.300356][T23927] ? xa_load+0x1db/0x210 [ 1937.300379][T23927] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 1937.300406][T23927] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1937.300470][T23927] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1937.300506][T23927] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1937.300531][T23927] ? nbd_start_device+0x174/0xb20 [ 1937.300597][T23927] nbd_start_device+0x17f/0xb20 [ 1937.300627][T23927] ? nbd_ioctl+0x133/0xe40 [ 1937.300671][T23927] nbd_ioctl+0x57b/0xe40 [ 1937.300694][T23927] ? __pfx_nbd_ioctl+0x10/0x10 [ 1937.300723][T23927] ? __asan_memset+0x22/0x50 [ 1937.300750][T23927] ? smack_file_ioctl+0x263/0x360 [ 1937.300791][T23927] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1937.300822][T23927] ? __pfx_nbd_ioctl+0x10/0x10 [ 1937.300843][T23927] blkdev_ioctl+0x5e6/0x750 [ 1937.300872][T23927] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1937.300897][T23927] ? __fget_files+0x2a/0x420 [ 1937.300932][T23927] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1937.300957][T23927] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1937.300982][T23927] __se_sys_ioctl+0xff/0x170 [ 1937.301015][T23927] do_syscall_64+0x14d/0xf80 [ 1937.301046][T23927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.301069][T23927] ? clear_bhb_loop+0x40/0x90 [ 1937.301094][T23927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.301116][T23927] RIP: 0033:0x7f2d1d40c799 [ 1937.301138][T23927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1937.301157][T23927] RSP: 002b:00007f2d1b666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1937.301184][T23927] RAX: ffffffffffffffda RBX: 00007f2d1d685fa0 RCX: 00007f2d1d40c799 [ 1937.301201][T23927] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1937.301214][T23927] RBP: 00007f2d1d4a2c99 R08: 0000000000000000 R09: 0000000000000000 [ 1937.301228][T23927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1937.301242][T23927] R13: 00007f2d1d686038 R14: 00007f2d1d685fa0 R15: 00007ffd1fc5bc68 [ 1937.301264][T23927] [ 1937.301273][T23927] [ 1937.301279][T23927] Allocated by task 1: [ 1937.301290][T23927] kasan_save_track+0x3e/0x80 [ 1937.301319][T23927] __kasan_kmalloc+0x93/0xb0 [ 1937.301345][T23927] __kmalloc_node_noprof+0x377/0x7f0 [ 1937.301383][T23927] blk_mq_alloc_tag_set+0x4e3/0xfc0 [ 1937.301405][T23927] nbd_dev_add+0x30e/0xb50 [ 1937.301432][T23927] nbd_init+0x168/0x1f0 [ 1937.301462][T23927] do_one_initcall+0x250/0x8d0 [ 1937.301487][T23927] do_initcall_level+0x104/0x190 [ 1937.301563][T23927] do_initcalls+0x59/0xa0 [ 1937.301583][T23927] kernel_init_freeable+0x2a6/0x3e0 [ 1937.301603][T23927] kernel_init+0x1d/0x1d0 [ 1937.301624][T23927] ret_from_fork+0x51e/0xb90 [ 1937.301652][T23927] ret_from_fork_asm+0x1a/0x30 [ 1937.301669][T23927] [ 1937.301674][T23927] The buggy address belongs to the object at ffff888026af5ac0 [ 1937.301674][T23927] which belongs to the cache kmalloc-8 of size 8 [ 1937.301691][T23927] The buggy address is located 0 bytes to the right of [ 1937.301691][T23927] allocated 8-byte region [ffff888026af5ac0, ffff888026af5ac8) [ 1937.301731][T23927] [ 1937.301737][T23927] The buggy address belongs to the physical page: [ 1937.301748][T23927] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026af52a0 pfn:0x26af5 [ 1937.301769][T23927] flags: 0x80000000000200(workingset|node=0|zone=1) [ 1937.301786][T23927] page_type: f5(slab) [ 1937.301805][T23927] raw: 0080000000000200 ffff88813fe1c500 ffffea0000986bd0 ffffea00017d0a90 [ 1937.301824][T23927] raw: ffff888026af52a0 000000080080006a 00000000f5000000 0000000000000000 [ 1937.301836][T23927] page dumped because: kasan: bad access detected [ 1937.301847][T23927] page_owner tracks the page as allocated [ 1937.301855][T23927] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7870120357, free_ts 7754242987 [ 1937.301889][T23927] post_alloc_hook+0x231/0x280 [ 1937.301920][T23927] get_page_from_freelist+0x28bb/0x2950 [ 1937.301940][T23927] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1937.301961][T23927] allocate_slab+0x77/0x660 [ 1937.301981][T23927] refill_objects+0x334/0x3c0 [ 1937.302002][T23927] __pcs_replace_empty_main+0x35c/0x710 [ 1937.302025][T23927] __kmalloc_node_noprof+0x610/0x7f0 [ 1937.302053][T23927] blk_mq_alloc_tag_set+0x4e3/0xfc0 [ 1937.302083][T23927] nbd_dev_add+0x30e/0xb50 [ 1937.302113][T23927] nbd_init+0x168/0x1f0 [ 1937.302130][T23927] do_one_initcall+0x250/0x8d0 [ 1937.302156][T23927] do_initcall_level+0x104/0x190 [ 1937.302177][T23927] do_initcalls+0x59/0xa0 [ 1937.302194][T23927] kernel_init_freeable+0x2a6/0x3e0 [ 1937.302213][T23927] kernel_init+0x1d/0x1d0 [ 1937.302231][T23927] ret_from_fork+0x51e/0xb90 [ 1937.302257][T23927] page last free pid 10 tgid 10 stack trace: [ 1937.302270][T23927] __free_frozen_pages+0xfe3/0x1170 [ 1937.302300][T23927] vfree+0x2ac/0x470 [ 1937.302325][T23927] delayed_vfree_work+0x55/0x80 [ 1937.302343][T23927] process_scheduled_works+0xb6e/0x18c0 [ 1937.302368][T23927] worker_thread+0xa53/0xfc0 [ 1937.302391][T23927] kthread+0x388/0x470 [ 1937.302408][T23927] ret_from_fork+0x51e/0xb90 [ 1937.302433][T23927] ret_from_fork_asm+0x1a/0x30 [ 1937.302451][T23927] [ 1937.302456][T23927] Memory state around the buggy address: [ 1937.302468][T23927] ffff888026af5980: 06 fc fc fc fa fc fc fc 05 fc fc fc 07 fc fc fc [ 1937.302483][T23927] ffff888026af5a00: 05 fc fc fc 05 fc fc fc 05 fc fc fc 00 fc fc fc [ 1937.302496][T23927] >ffff888026af5a80: 05 fc fc fc 00 fc fc fc 00 fc fc fc 07 fc fc fc [ 1937.302506][T23927] ^ [ 1937.302517][T23927] ffff888026af5b00: 07 fc fc fc 07 fc fc fc fa fc fc fc fa fc fc fc [ 1937.302530][T23927] ffff888026af5b80: fa fc fc fc fa fc fc fc fa fc fc fc 02 fc fc fc [ 1937.302540][T23927] ================================================================== [ 1937.302567][T23927] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1937.302587][T23927] CPU: 1 UID: 0 PID: 23927 Comm: syz.7.5807 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1937.302616][T23927] Tainted: [L]=SOFTLOCKUP [ 1937.302624][T23927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1937.302637][T23927] Call Trace: [ 1937.302646][T23927] [ 1937.302656][T23927] vpanic+0x56c/0xa60 [ 1937.302690][T23927] ? __pfx_vpanic+0x10/0x10 [ 1937.302739][T23927] panic+0xc5/0xd0 [ 1937.302767][T23927] ? __pfx_panic+0x10/0x10 [ 1937.302796][T23927] ? blk_mq_free_rqs+0xea/0x680 [ 1937.302824][T23927] ? blk_mq_free_rqs+0xea/0x680 [ 1937.302847][T23927] check_panic_on_warn+0x89/0xb0 [ 1937.302871][T23927] ? blk_mq_free_rqs+0xea/0x680 [ 1937.302894][T23927] end_report+0x73/0x180 [ 1937.302913][T23927] ? blk_mq_free_rqs+0xea/0x680 [ 1937.302936][T23927] kasan_report+0x128/0x150 [ 1937.302954][T23927] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1937.302982][T23927] ? blk_mq_free_rqs+0xea/0x680 [ 1937.303011][T23927] blk_mq_free_rqs+0xea/0x680 [ 1937.303041][T23927] blk_mq_free_map_and_rqs+0x40/0xf0 [ 1937.303068][T23927] blk_mq_free_sched_res+0xeb/0x280 [ 1937.303097][T23927] elevator_change_done+0x1d2/0x5f0 [ 1937.303124][T23927] ? __pfx_elevator_change_done+0x10/0x10 [ 1937.303148][T23927] ? elevator_change+0x2e0/0x450 [ 1937.303172][T23927] elevator_change+0x321/0x450 [ 1937.303196][T23927] elevator_set_none+0xb5/0x140 [ 1937.303218][T23927] ? __pfx_elevator_set_none+0x10/0x10 [ 1937.303242][T23927] ? xa_load+0x1db/0x210 [ 1937.303264][T23927] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 1937.303293][T23927] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1937.303325][T23927] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1937.303360][T23927] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1937.303389][T23927] ? nbd_start_device+0x174/0xb20 [ 1937.303422][T23927] nbd_start_device+0x17f/0xb20 [ 1937.303452][T23927] ? nbd_ioctl+0x133/0xe40 [ 1937.303473][T23927] nbd_ioctl+0x57b/0xe40 [ 1937.303497][T23927] ? __pfx_nbd_ioctl+0x10/0x10 [ 1937.303515][T23927] ? __asan_memset+0x22/0x50 [ 1937.303539][T23927] ? smack_file_ioctl+0x263/0x360 [ 1937.303566][T23927] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1937.303595][T23927] ? __pfx_nbd_ioctl+0x10/0x10 [ 1937.303616][T23927] blkdev_ioctl+0x5e6/0x750 [ 1937.303642][T23927] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1937.303668][T23927] ? __fget_files+0x2a/0x420 [ 1937.303695][T23927] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1937.303727][T23927] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1937.303753][T23927] __se_sys_ioctl+0xff/0x170 [ 1937.303787][T23927] do_syscall_64+0x14d/0xf80 [ 1937.303820][T23927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.303843][T23927] ? clear_bhb_loop+0x40/0x90 [ 1937.303867][T23927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.303888][T23927] RIP: 0033:0x7f2d1d40c799 [ 1937.303909][T23927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1937.303929][T23927] RSP: 002b:00007f2d1b666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1937.303954][T23927] RAX: ffffffffffffffda RBX: 00007f2d1d685fa0 RCX: 00007f2d1d40c799 [ 1937.303972][T23927] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1937.303986][T23927] RBP: 00007f2d1d4a2c99 R08: 0000000000000000 R09: 0000000000000000 [ 1937.304000][T23927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1937.304014][T23927] R13: 00007f2d1d686038 R14: 00007f2d1d685fa0 R15: 00007ffd1fc5bc68 [ 1937.304037][T23927] [ 1937.304350][T23927] Kernel Offset: disabled